返回 CVE 浏览器

CVE-2024-3400

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-04-12

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

Affected Platforms (CPE)

💻

Paloaltonetworks

Pan Os

= 10.2.0= 10.2.1= 10.2.2= 10.2.3= 10.2.4= 10.2.5= 10.2.6= 10.2.7= 10.2.8= 10.2.9= 11.0.0= 11.0.1= 11.0.2= 11.0.3= 11.0.4= 11.1.0= 11.1.1= 11.1.2

References & Advisories

🔗 https://security.paloaltonetworks.com/CVE-2024-3400

🔗 https://unit42.paloaltonetworks.com/cve-2024-3400/

🔗 https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/

🔗 https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/

🔗 https://security.paloaltonetworks.com/CVE-2024-3400

🔗 https://unit42.paloaltonetworks.com/cve-2024-3400/

🔗 https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/

🔗 https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/

相關資安分析文章

周度网络安全新闻：2026 年 7 月 27 日

本周重大安全周报聚焦于 Check Point SmartConsole CVE-2026-16232 验证绕过之在野利用、PAN-OS GlobalProtect 漏洞与 Qilin 勒索软件侵袭、俄罗斯 LAUNDRY BEAR 对 Zimbra 进行之国家级电子邮件间谍活动，以及 Windchill 与 FakeGit 恶意 Repositories 威胁趋势。

全球网络威胁情报摘要：2026 年 7 月 22 日

本期摘要重点分析本地部署 Microsoft SharePoint 服务器正遭主动利用之 CVE-2026-50522 漏洞、Qilin 勒索软件利用 PAN-OS CVE-2026-0257 身份验证绕过入侵企业 VPN，以及 Cisco 安全设备与关键基础设施修补处置指南。

相关漏洞威胁

CVE-2026-643787.8

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and ino...

CVE-2026-638137.8

In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache i...

CVE-2026-02877.5

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network a...

CVE-2026-02867.2

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administ...