CVE-2024-3400: Critical Vulnerability in GlobalProtect Feature of PAN-OS being Actively Exploited

On 12 April 2024, Palo Alto Networks published a security advisory detailing an actively exploited maximum severity vulnerability (CVE-2024-3400, CVSS: 10.0) affecting the GlobalProtect feature of PAN-OS. This vulnerability affects PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 firewalls when configurations for both GlobalProtect gateway and device telemetry are enabled. An unauthenticated remote threat actor can … CVE-2024-3400: Critical Vulnerability in GlobalProtect Feature of PAN-OS being Actively Exploited

Article Link: CVE-2024-3400: Critical Vulnerability - Arctic Wolf

1 post - 1 participant …

actively exploited advisory alto april critical critical vulnerability cve cve-2024 cve-2024-3400 cvss device exploited feature firewalls gateway globalprotect networks palo palo alto palo alto networks pan pan-os security security advisory severity telemetry vulnerability