Skip to main content
RuntimeRebel
critical CISA KEV Ransomware

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

// Description

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

// Required action

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Federal remediation due Apr 19, 2024 — past due

Advertisement

// Coverage