CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls

On Friday, April 12, Palo Alto Networks published an advisory on CVE-2024-3400, a CVSS 10 vulnerability in several versions of PAN-OS, the operating system that runs on the company’s firewalls. CVE-2024-3400 allows for arbitrary code execution as root.

advisory alto april arbitrary code arbitrary code execution code code execution command command injection critical cve cve-2024 cvss cvss 10 emergent threat response firewalls injection networks operating system palo palo alto palo alto networks pan pan-os root system the company vulnerability vulnerability management