CVE Watch—

CVE-2024-3400

Palo Alto Networks PAN-OS Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

12 de abr. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Palo Alto Networks / PAN-OS

Vulnerabilidade

Palo Alto Networks PAN-OS Command Injection Vulnerability

Adicionado ao KEV

12 de abr. de 2024

Corrigir até

19 de abr. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Ação necessária

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Notas

https://security.paloaltonetworks.com/CVE-2024-3400 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3400

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-03227.2 ALT

77.8%

KEV—73Palo Alto Networks PAN-OS Code Injection Vulnerability22d CVE-2026-02579.1 CRÍ

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability10d CVE-2026-03009.8 CRÍ

98.7%

KEV—80Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability10d CVE-2025-01089.1 CRÍ

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability43d CVE-2024-94747.2 ALT

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability94d CVE-2024-00129.8 CRÍ

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability94d