CVE Watch—

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

12 abr 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Palo Alto Networks / PAN-OS

Vulnerabilidad

Palo Alto Networks PAN-OS Command Injection Vulnerability

Añadido a KEV

12 abr 2024

Remediar antes de

19 abr 2024

Uso conocido en ransomware

Sí

Descripción resumida

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Acción requerida

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Notas

https://security.paloaltonetworks.com/CVE-2024-3400 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3400

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2024-0012—

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability—CVE-2025-0108—

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2024-9474—

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2026-0257—

99.7%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2019-1579—

98.4%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—