CVE-2024-3400

Vulnerability details

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Added to CISA KEV: 2024-04-12

Ransomware campaign use: Known

CISA due date: 2024-04-19

Defensive guidance from CISA

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.