This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Palo Alto Networks fixes 1 critical vulnerability in PAN-OS

Palo Alto Networks fixes 1 critical vulnerability in the PAN-OS product. The vulnerability affects only versions 10.2.x, 11.0.x, 11.1.x and the fix is available in versions 10.2.9-h1, 11.0.4-h1, 11.1.2-h3. The organization is aware of active exploitation of the vulnerability [1].

PAN-OS - command injection (CVE-2024-3400)
CVSS 9.8 (Critical)

An unauthenticated remote attacker can execute arbitrary code with root privileges on a device with the affected firewall [1][2]. The vulnerability is exploitable only if device telemetry is enabled and a GlobalProtect gateway is configured [1]. A temporary fix is available only to Threat Prevention subscribers, by enabling Threat ID 95187 and applying protection to the GlobalProtect interface [1][3].

The vulnerability is present in product:

  • PAN-OS; >= 11.1.0, < 11.1.2-h3; >= 11.0.0, < 11.0.4-h1; >= 10.2.0, < 10.2.9-h1;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 12. 4. 2024.

By CESNET, z.s.p.o. Martin Krajči on 12. 4. 2024.

CESNET, z.s.p.o. Logo