ACTIEF MISBRUIKT
CVE-2024-3400: Palo Alto Networks PAN-OS Command Injection Vulnerability
| Leverancier | Palo Alto Networks |
|---|---|
| Product | PAN-OS |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 12 apr 2024 |
| CISA-deadline (Amerikaanse overheid) | 19 apr 2024 |
| Gebruik door ransomware | Bekend |
| Zwakte (CWE) | CWE-20, CWE-77 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.
Beschrijving (NVD, Engels)
Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.
BRONNEN
Andere lekken bij Palo Alto Networks
- CVE-2026-0322: Palo Alto Networks PAN-OS Code Injection Vulnerability
- CVE-2026-0257: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
- CVE-2026-0300: Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
- CVE-2025-0111: Palo Alto Networks PAN-OS File Read Vulnerability
- CVE-2025-0108: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.