Vulnerability Warning丨Palo Alto Networks PAN-OS command injection vulnerability (CVE-2024-3400)

Shengbang Security

technology

Just released

1144

collect

Palo Alto Networks' PAN-OS is an operating system that runs on Palo Alto Networks firewalls and enterprise VPN devices. A command injection vulnerability exists in the GlobalProtect function of Palo Alto Networks PAN-OS software. Targeting specific PAN-OS versions and different functional configurations, it may allow an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. On April 10, 2024, Volexity discovered that one of its Network Security Monitoring (NSM) customers had implemented a zero-day exploit of a vulnerability discovered in the Palo Alto Networks PAN-OS GlobalProtect feature that allowed the attacker to create a reverse shell, download tools, steal Configure data and move it laterally within the network. The Palo Alto Networks PSIRT team identified the vulnerability as an operating system command injection issue and assigned it CVE-2024-3400.

According to data from www.daydaymap.com, the distribution of domestic risk assets in the past six months is as follows, mainly in Taiwan Province.

If reprinted, please indicate the original address.

• share to
• 
  

You may be interested

• 

  Vulnerability Warning丨Palo Alto Networks PAN-OS command injection vulnerability (CVE-2024-3400)

• 

  Stealth GTPDOOR Linux malware targets mobile operator networks

• 

  Incinerator – the ultimate tool for reverse engineering Android malware

• 

  StopCrypt: The most widely distributed ransomware evolves to evade detection

• 

  Analysis of recent attack activities of “Youshe” black product

• 

  Vulnerability warning丨XZ Utilѕ tool library malicious backdoor implantation vulnerability (CVE-2024-3094)[includes self-check method]