VulnerabilityALERT Critical

CVE-2024-3400: Palo Alto PAN-OS command injection vulnerability

Known exploited PAN-OS command injection vulnerability affecting firewall management and GlobalProtect deployments.

Threat actors may execute commands on affected appliances, enabling persistence, data access, or lateral movement.

Apply vendor fixes, restrict management exposure, hunt for indicators of compromise, and review device configuration changes.

Published: 4/12/2024, 12:00:00 PMSource: Makriva Vulnerability SeedTags: CVE-2024-3400, Palo Alto, PAN-OS, Command Injection, CISA KEV