coldbraid

CVE-2024-3400 Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

CVSS
not scored

CWE-20CWE-77

On CISA’s exploited list

Palo Alto Networks PAN-OS Command Injection Vulnerability

Added
2024-04-12
Federal patch deadline
2024-04-19
Ransomware use
known

Actors known to use it (MITRE ATT&CK)