A Look at CVE-2024-3400 Activity and Upstyle Backdoor Technical Analysis

IntroductionRecently, a zero-day command-injection vulnerability, assigned to CVE-2024-3400, was found in the Palo Alto Networks PAN-OS. It was assigned the maximum severity score of 10.0 and can be exploited by an unauthenticated user to run arbitrary commands on the target system with root privileges.Volexity was the first to identify and report the vulnerability. Since then, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2024-3400 to its Known Exploited Vulnerability Catalog.In this blog, we will share the vulnerability exploitation activity observed …

alto analysis backdoor can command cve cve-2024 cve-2024-3400 exploited found identify injection networks palo palo alto palo alto networks palo alto networks pan-os pan pan-os privileges root run score severity system target technical technical analysis unauthenticated volexity vulnerability zero-day