Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
GlobalProtect PAN-OS RCE (CVE-2024-3400) - Vulnerability Database

GlobalProtect PAN-OS RCE (CVE-2024-3400)

Description

Arbitrary File Creation vulnerability was identified in the GlobalProtect VPN feature of PAN-OS by Palo Alto Networks. This vulnerability affects specific versions under certain configurations and allows an unauthenticated attacker to execute arbitrary code with root privileges on the affected system.

Remediation

Upgrade to the latest version of PAN-OS

References

CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Watchtowr Labs Analysis

Related Vulnerabilities

Sitecore XM/XP Insecure Deserialization (CVE-2025-27218) Critical
Common tags: Code Execution Known Vulnerabilities
Ektron CMS unauthenticated code execution and Local File Read High
Common tags: Code Execution Known Vulnerabilities
PHP CGI Argument Injection (CVE-2024-4577) Critical
Common tags: Code Execution Known Vulnerabilities
Ruby on Rails DoubleTap RCE (CVE-2019-5420) High
Common tags: Code Execution Known Vulnerabilities
Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387) High
Common tags: Code Execution Known Vulnerabilities

Severity

Critical

Classification

CVE-2024-3400
CWE-77
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Code Execution
Known Vulnerabilities