1. Home
  2. Vulnerabilities
  3. CVE-2024-3400
Known Exploited Vulnerability
10.0
CRITICAL CVSS 3.1
CVE-2024-3400
Palo Alto Networks PAN-OS Command Injection Vulnerability - [Actively Exploited]
Description

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

INFO

Published Date :

April 12, 2024, 8:15 a.m.

Last Modified :

Nov. 29, 2024, 4:47 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]
CISA Notification
CISA KEV (Known Exploited Vulnerabilities)

For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.

Description :

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall.

Required Action :

Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.

Notes :

https://security.paloaltonetworks.com/CVE-2024-3400 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3400

Affected Products

The following products are affected by CVE-2024-3400 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Paloaltonetworks pan-os
2 Paloaltonetworks prisma_access
: Total Affected Vendor : 1 | Products : 2
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 3.1 CRITICAL [email protected]
CVSS 3.1 CRITICAL [email protected]
Solution
This information is provided by the 3rd party feeds.
  • Apply update from vendor advisory.
Public PoC/Exploit Available at Github

CVE-2024-3400 has a 110 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-3400.

URL Resource
https://security.paloaltonetworks.com/CVE-2024-3400 Vendor Advisory
https://unit42.paloaltonetworks.com/cve-2024-3400/ Exploit Vendor Advisory
https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/ Technical Description Vendor Advisory
https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/ Exploit Third Party Advisory
https://security.paloaltonetworks.com/CVE-2024-3400 Vendor Advisory
https://unit42.paloaltonetworks.com/cve-2024-3400/ Exploit Vendor Advisory
https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/ Technical Description Vendor Advisory
https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/ Exploit Third Party Advisory
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-3400 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-3400 weaknesses.

CAPEC-3: Using Leading 'Ghost' Character Sequences to Bypass Input Filters Using Leading 'Ghost' Character Sequences to Bypass Input Filters CAPEC-7: Blind SQL Injection Blind SQL Injection CAPEC-8: Buffer Overflow in an API Call Buffer Overflow in an API Call CAPEC-9: Buffer Overflow in Local Command-Line Utilities Buffer Overflow in Local Command-Line Utilities CAPEC-10: Buffer Overflow via Environment Variables Buffer Overflow via Environment Variables CAPEC-13: Subverting Environment Variable Values Subverting Environment Variable Values CAPEC-14: Client-side Injection-induced Buffer Overflow Client-side Injection-induced Buffer Overflow CAPEC-22: Exploiting Trust in Client Exploiting Trust in Client CAPEC-23: File Content Injection File Content Injection CAPEC-24: Filter Failure through Buffer Overflow Filter Failure through Buffer Overflow CAPEC-28: Fuzzing Fuzzing CAPEC-31: Accessing/Intercepting/Modifying HTTP Cookies Accessing/Intercepting/Modifying HTTP Cookies CAPEC-42: MIME Conversion MIME Conversion CAPEC-43: Exploiting Multiple Input Interpretation Layers Exploiting Multiple Input Interpretation Layers CAPEC-45: Buffer Overflow via Symbolic Links Buffer Overflow via Symbolic Links CAPEC-46: Overflow Variables and Tags Overflow Variables and Tags CAPEC-47: Buffer Overflow via Parameter Expansion Buffer Overflow via Parameter Expansion CAPEC-52: Embedding NULL Bytes Embedding NULL Bytes CAPEC-53: Postfix, Null Terminate, and Backslash Postfix, Null Terminate, and Backslash CAPEC-63: Cross-Site Scripting (XSS) Cross-Site Scripting (XSS) CAPEC-64: Using Slashes and URL Encoding Combined to Bypass Validation Logic Using Slashes and URL Encoding Combined to Bypass Validation Logic CAPEC-67: String Format Overflow in syslog() String Format Overflow in syslog() CAPEC-71: Using Unicode Encoding to Bypass Validation Logic Using Unicode Encoding to Bypass Validation Logic CAPEC-72: URL Encoding URL Encoding CAPEC-73: User-Controlled Filename User-Controlled Filename CAPEC-78: Using Escaped Slashes in Alternate Encoding Using Escaped Slashes in Alternate Encoding CAPEC-79: Using Slashes in Alternate Encoding Using Slashes in Alternate Encoding CAPEC-80: Using UTF-8 Encoding to Bypass Validation Logic Using UTF-8 Encoding to Bypass Validation Logic CAPEC-81: Web Server Logs Tampering Web Server Logs Tampering CAPEC-83: XPath Injection XPath Injection CAPEC-85: AJAX Footprinting AJAX Footprinting CAPEC-88: OS Command Injection OS Command Injection CAPEC-101: Server Side Include (SSI) Injection Server Side Include (SSI) Injection CAPEC-104: Cross Zone Scripting Cross Zone Scripting CAPEC-108: Command Line Execution through SQL Injection Command Line Execution through SQL Injection CAPEC-109: Object Relational Mapping Injection Object Relational Mapping Injection CAPEC-110: SQL Injection through SOAP Parameter Tampering SQL Injection through SOAP Parameter Tampering CAPEC-120: Double Encoding Double Encoding CAPEC-135: Format String Injection Format String Injection CAPEC-136: LDAP Injection LDAP Injection CAPEC-153: Input Data Manipulation Input Data Manipulation CAPEC-182: Flash Injection Flash Injection CAPEC-209: XSS Using MIME Type Mismatch XSS Using MIME Type Mismatch CAPEC-230: Serialized Data with Nested Payloads Serialized Data with Nested Payloads CAPEC-231: Oversized Serialized Data Payloads Oversized Serialized Data Payloads CAPEC-250: XML Injection XML Injection CAPEC-261: Fuzzing for garnering other adjacent user/sensitive data Fuzzing for garnering other adjacent user/sensitive data CAPEC-267: Leverage Alternate Encoding Leverage Alternate Encoding CAPEC-473: Signature Spoof Signature Spoof CAPEC-588: DOM-Based XSS DOM-Based XSS CAPEC-664: Server Side Request Forgery Server Side Request Forgery CAPEC-15: Command Delimiters Command Delimiters CAPEC-40: Manipulating Writeable Terminal Devices Manipulating Writeable Terminal Devices CAPEC-43: Exploiting Multiple Input Interpretation Layers Exploiting Multiple Input Interpretation Layers CAPEC-75: Manipulating Writeable Configuration Files Manipulating Writeable Configuration Files CAPEC-76: Manipulating Web Input to File System Calls Manipulating Web Input to File System Calls CAPEC-136: LDAP Injection LDAP Injection CAPEC-183: IMAP/SMTP Command Injection IMAP/SMTP Command Injection CAPEC-248: Command Injection Command Injection

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
zhanpengliu-tencent/medium-cve

None

Updated: 1 week, 2 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 15, 2025, 9:07 a.m. This repo has been linked 310 different CVEs too.
Profile Photo
Cyb3rTim/Cyber-Threat-Intelligence-Dashboard

A professional SOC-style cyber threat intelligence dashboard built using React and Express.js. This project simulates real-time tracking of APT27 (aka Silk Typhoon) activities using verified IOCs, CVEs, and MITRE ATT&CK mappings.

Updated: 2 weeks, 3 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 7, 2025, 11:37 a.m. This repo has been linked 3 different CVEs too.
Profile Photo
0day404/HV-2024-POC

护网2024-POC收录备份

Updated: 2 weeks, 3 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 4, 2025, 1:25 p.m. This repo has been linked 119 different CVEs too.
Profile Photo
shreyxploit/ThreatLens

ThreatLens : It is an automated CVE intelligence gathering system that crawls the open web to collect, analyze, and report comprehensive threat intelligence for any given CVE identifier.

Python Shell

Updated: 3 weeks ago
0 stars 0 fork 0 watcher
Born at : Aug. 3, 2025, 12:41 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
lodetomasi/zero-day-llm-ensemble

Multi-agent LLM ensemble for automated zero-day vulnerability detection. Thompson Sampling optimization, 21+ evidence sources, 5 specialized agents.

ensemble-learning llm multi-agent-system security threat-intelligence vulnerability-detection zero-day

Python

Updated: 2 weeks, 4 days ago
0 stars 0 fork 0 watcher
Born at : July 23, 2025, 3:05 p.m. This repo has been linked 3 different CVEs too.
Profile Photo
febrian96r/Cybersecurity-Portfolio

None

Updated: 1 month ago
0 stars 0 fork 0 watcher
Born at : July 20, 2025, 7:43 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
febrian96r/febrian96r

None

Updated: 1 month ago
0 stars 0 fork 0 watcher
Born at : July 20, 2025, 7:35 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
Just-Hack-For-Fun/NOPTrace-Configs

符合 OpenForensicRules 数字取证与应急响应信息采集规则格式规范的配置文件仓库

Updated: 1 month ago
14 stars 0 fork 0 watcher
Born at : July 7, 2025, 7:41 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
Lern0n/Lernon-POC

备份的漏洞库，3月开始我们来维护

Updated: 1 month, 1 week ago
2 stars 0 fork 0 watcher
Born at : June 30, 2025, 9:14 a.m. This repo has been linked 216 different CVEs too.
Profile Photo
barkandbite/iranian-apt-detection

None

Shell

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : June 25, 2025, 1:50 p.m. This repo has been linked 5 different CVEs too.
Profile Photo
oLy0/Vulnerability

None

Updated: 2 months, 1 week ago
0 stars 0 fork 0 watcher
Born at : June 15, 2025, 2:32 a.m. This repo has been linked 216 different CVEs too.
Profile Photo
CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

None

Updated: 2 months, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : June 8, 2025, 2:29 p.m. This repo has been linked 2 different CVEs too.
Profile Photo
CyberBibs/Labs

None

Updated: 2 months, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : June 8, 2025, 10:42 a.m. This repo has been linked 2 different CVEs too.
Profile Photo
oLy0/Vulnerability

None

Updated: 2 months, 3 weeks ago
0 stars 0 fork 0 watcher
Born at : May 30, 2025, 2:59 a.m. This repo has been linked 213 different CVEs too.
Profile Photo
ozanunal0/viper

🛡️ VIPER: Stay ahead of threats with AI-driven vulnerability intelligence. Prioritize CVEs effectively using NVD, EPSS, CISA KEV, and Google Gemini insights, all on an interactive dashboard

ai cisa-kev cve cybersecurity epss llm nvd python threat-intelligence vulnerability-management claude-desktop mcp ollama

Python Shell Dockerfile

Updated: 1 week ago
76 stars 11 fork 11 watcher
Born at : May 17, 2025, 7:56 a.m. This repo has been linked 3 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-3400 vulnerability anywhere in the article.

  • Daily CyberSecurity
ByteDance’s Trae IDE Under Fire: AI Coding Tool Caught Telemetry Spying Even After Opt-Out

Trae IDE, an AI-powered programming tool and integrated development environment (IDE) developed by ByteDance, has recently come under scrutiny on GitHub, where developers have raised concerns regardin ... Read more

Published Date: Jul 29, 2025 (3 weeks, 5 days ago)
  • BleepingComputer
Chinese hackers breached National Guard to steal network configurations

The Chinese state-sponsored hacking group known as Salt Typhoon breached and remained undetected in a U.S. Army National Guard network for nine months in 2024, stealing network configuration files and ... Read more

Published Date: Jul 17, 2025 (1 month, 1 week ago)
  • The Hacker News
Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom Backdoors

The Taiwanese semiconductor industry has become the target of spear-phishing campaigns undertaken by three Chinese state-sponsored threat actors. "Targets of these campaigns ranged from organizations ... Read more

Published Date: Jul 17, 2025 (1 month, 1 week ago)
  • Daily CyberSecurity
Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025

Kaspersky’s latest “Exploits and vulnerabilities in Q1 2025” shows that attackers are doubling down on aging exploits, platform-specific weaknesses, and mismanaged updates. With over 9,700 vulnerabili ... Read more

Published Date: Jun 03, 2025 (2 months, 3 weeks ago)
  • security.nl
Mandiant: kwetsbaarheden in vpn-software vaakst aangevallen vorig jaar

Kwetsbaarheden in vpn-software blijven een zeer populair doelwit van aanvallers, zo stelt Mandiant. De helft van alle cyberincidenten die het securitybedrijf vorig jaar onderzocht begonnen via kwetsba ... Read more

Published Date: Apr 28, 2025 (3 months, 3 weeks ago)
  • Help Net Security
Understanding 2024 cyber attack trends

Mandiant has released the M-Trends 2025 report, which outlines global cyber attack trends based on their own incident response engagements from 2024. Key trends and insights In 2024, Mandiant handled ... Read more

Published Date: Apr 24, 2025 (4 months ago)
  • security.nl
FBI: ransomware-aanvallen via jaren oude Citrix-kwetsbaarheden

Aanvallers maken nog altijd gebruik van jaren oude Citrix-kwetsbaarheden om organisaties met ransomware te infecteren, zo stelt de FBI. Ook oude kwetsbaarheden in firewalls van Palo Alto Networks en B ... Read more

Published Date: Apr 04, 2025 (4 months, 2 weeks ago)
  • Cyber Security News
Hackers Scanning From 24,000 IPs to Gain Access to Palo Alto Networks GlobalProtect Portals

Researchers have detected an alarming surge in malicious scanning activity targeting Palo Alto Networks’ GlobalProtect VPN portals. Over a 30-day period, nearly 24,000 unique IP addresses have attempt ... Read more

Published Date: Apr 01, 2025 (4 months, 3 weeks ago)
  • Dark Reading
China's Silk Typhoon APT Shifts to IT Supply Chain Attacks

Source: Chebakalex7 via ShutterstockThe China-backed cyber-espionage group known as "Silk Typhoon" has begun targeting organizations in the IT supply chain to gain access to their downstream customers ... Read more

Published Date: Mar 05, 2025 (5 months, 2 weeks ago)
  • BleepingComputer
Silk Typhoon hackers now target IT supply chains to breach networks

Microsoft warns that Chinese cyber-espionage threat group 'Silk Typhoon' has shifted its tactics, now targeting remote management tools and cloud services in supply chain attacks that give them access ... Read more

Published Date: Mar 05, 2025 (5 months, 2 weeks ago)
  • The Register
China's Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

Silk Typhoon, the Chinese government crew believed to be behind the December US Treasury intrusions, has been abusing stolen API keys and cloud credentials in ongoing attacks targeting IT companies an ... Read more

Published Date: Mar 05, 2025 (5 months, 2 weeks ago)
  • The Hacker News
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Network Security / Data Breach The China-lined threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the infor ... Read more

Published Date: Mar 05, 2025 (5 months, 2 weeks ago)
  • Hackread - Latest Cybersecurity, Tech, AI, Crypto & Hacking News
Scammers Mailing Ransom Letters While Posing as BianLian Ransomware

Scammers are impersonating BianLian ransomware, and mailing fake ransom letters to businesses. Learn the red flags and how to protect against this extortion scam. GuidePoint Security’s Senior Threat I ... Read more

Published Date: Mar 04, 2025 (5 months, 2 weeks ago)
  • Cyber Security News
23 Vulnerabilities in Black Basta’s Chat Logs Exploited in the Wild, Including PAN-OS, Cisco IOS, & Exchange

GreyNoise has confirmed active exploitation of 23 out of 62 vulnerabilities referenced in internal chat logs attributed to the Black Basta ransomware group. These vulnerabilities span enterprise softw ... Read more

Published Date: Feb 27, 2025 (5 months, 4 weeks ago)
  • The Cyber Express
Black Basta Chat Logs Reveal Ransomware Group’s TTPs, IoCs

The Black Basta ransomware group has fallen off dramatically in 2025, and chat logs leaked recently show that internal squabbling may be behind the group’s slowed activity. Cyble threat intelligence r ... Read more

Published Date: Feb 26, 2025 (5 months, 4 weeks ago)
  • Google Cloud
Cybercrime: A Multifaceted National Security Threat

Google Threat Intelligence Group Executive Summary Cybercrime makes up a majority of the malicious activity online and occupies the majority of defenders' resources. In 2024, Mandiant Consulting respo ... Read more

Published Date: Feb 11, 2025 (6 months, 1 week ago)
  • TheCyberThrone
Most Exploited Vulnerabilities in 2024 Top 20 Analysis

In 2024, the cybersecurity landscape saw a significant number of exploited vulnerabilities, highlighting the ongoing challenges organizations face in protecting their systems and data.Some key trends ... Read more

Published Date: Dec 22, 2024 (8 months ago)
  • The Register
Severity of the risk facing the UK is widely underestimated, NCSC annual review warns

The number of security threats in the UK that hit the country's National Cyber Security Centre's (NCSC) maximum severity threshold has tripled compared to the previous 12 months. Published today, GCHQ ... Read more

Published Date: Dec 03, 2024 (8 months, 3 weeks ago)
  • TheCyberThrone
PaloAlto devices are under massive exploitation

Researchers from Shadowserver have revealed that approximately 2,000 Palo Alto Networks firewalls have been compromised leavaraging recently discovered zeroday bugs. namely  CVE-2024-0012 and CVE-2024 ... Read more

Published Date: Nov 23, 2024 (9 months ago)
  • Hackread - Latest Cybersecurity, Tech, Crypto & Hacking News
Operation Lunar Peek: More Than 2,000 Palo Alto Network Firewalls Hacked

The Shadowserver Foundation reports over 2,000 Palo Alto Networks firewalls have been hacked via two zero-day vulnerabilities: CVE-2024-0012 & CVE-2024-9474, enabling admin bypass and root access. Top ... Read more

Published Date: Nov 22, 2024 (9 months ago)

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2024-3400 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Modified Analysis by [email protected]

    Nov. 29, 2024

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h13:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h16:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h3:*:*:*:*:*:* OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:*
  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Nov. 21, 2024

    Action Type Old Value New Value
    Added Reference https://security.paloaltonetworks.com/CVE-2024-3400
    Added Reference https://unit42.paloaltonetworks.com/cve-2024-3400/
    Added Reference https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/
    Added Reference https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/
  • CVE Modified by [email protected]

    Jun. 04, 2024

    Action Type Old Value New Value
  • Reanalysis by [email protected]

    May. 29, 2024

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:* OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h13:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h16:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h8:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h3:*:*:*:*:*:*
  • Reanalysis by [email protected]

    May. 21, 2024

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:* OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:*
  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Modified Analysis by [email protected]

    Apr. 23, 2024

    Action Type Old Value New Value
    Changed Reference Type https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/ No Types Assigned https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/ Technical Description, Vendor Advisory
    Changed CPE Configuration OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:*:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:*:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:*:*:*:*:*:*:* OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Apr. 19, 2024

    Action Type Old Value New Value
    Added Reference Palo Alto Networks, Inc. https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/ [No types assigned]
  • CVE Modified by [email protected]

    Apr. 18, 2024

    Action Type Old Value New Value
    Changed Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability. A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
    Added CWE Palo Alto Networks, Inc. CWE-20
  • CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725

    Apr. 18, 2024

    Action Type Old Value New Value
    Changed Required Action Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention Threat ID 95187 if that is available, or disable device telemetry until patches are available from the vendor. See the vendor bulletin for more details and a patch release schedule. Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.
  • CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725

    Apr. 16, 2024

    Action Type Old Value New Value
    Changed Required Action Users of affected devices should enable Threat Prevention Threat ID 95187 if that is available, otherwise, disable device telemetry until patches are available from the vendor, per vendor instructions. Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention Threat ID 95187 if that is available, or disable device telemetry until patches are available from the vendor. See the vendor bulletin for more details and a patch release schedule.
  • Initial Analysis by [email protected]

    Apr. 15, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
    Changed Reference Type https://security.paloaltonetworks.com/CVE-2024-3400 No Types Assigned https://security.paloaltonetworks.com/CVE-2024-3400 Vendor Advisory
    Changed Reference Type https://unit42.paloaltonetworks.com/cve-2024-3400/ No Types Assigned https://unit42.paloaltonetworks.com/cve-2024-3400/ Exploit, Vendor Advisory
    Changed Reference Type https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/ No Types Assigned https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/ Exploit, Third Party Advisory
    Added CWE NIST CWE-77
    Added CPE Configuration OR *cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:*:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:*:*:*:*:*:*:* *cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:*:*:*:*:*:*:*
  • CVE Modified by [email protected]

    Apr. 15, 2024

    Action Type Old Value New Value
    Changed Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Fixes for PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 are in development and are expected to be released by April 14, 2024. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability. All other versions of PAN-OS are also not impacted. A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
    Added Reference Palo Alto Networks, Inc. https://unit42.paloaltonetworks.com/cve-2024-3400/ [No types assigned]
    Added Reference Palo Alto Networks, Inc. https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/ [No types assigned]
  • CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725

    Apr. 13, 2024

    Action Type Old Value New Value
    Added Vulnerability Name Palo Alto Networks PAN-OS Command Injection Vulnerability
    Added Date Added 2024-04-12
    Added Due Date 2024-04-19
    Added Required Action Users of affected devices should enable Threat Prevention Threat ID 95187 if that is available, otherwise, disable device telemetry until patches are available from the vendor, per vendor instructions.
  • CVE Modified by [email protected]

    Apr. 12, 2024

    Action Type Old Value New Value
    Removed CVSS V3.1 Palo Alto Networks, Inc. AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CVSS V3.1 Palo Alto Networks, Inc. AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
  • CVE Received by [email protected]

    Apr. 12, 2024

    Action Type Old Value New Value
    Added Description A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Fixes for PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 are in development and are expected to be released by April 14, 2024. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability. All other versions of PAN-OS are also not impacted.
    Added Reference Palo Alto Networks, Inc. https://security.paloaltonetworks.com/CVE-2024-3400 [No types assigned]
    Added CWE Palo Alto Networks, Inc. CWE-77
    Added CVSS V3.1 Palo Alto Networks, Inc. AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
Base CVSS Score: 10
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact