THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-5912

Cortex XDR Agent: Improper File Signature Verification Checks

Assignerpalo_alto
Reserved2024-06-12
Published2024-07-10
Updated2024-07-11

Description

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.



MEDIUM: 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber

Problem types

CWE-347 Improper Verification of Cryptographic Signature

Product status

Default status
unaffected

8.4
unaffected

8.3-CE
unaffected

8.3
unaffected

7.9-CE before 7.9.102-CE
affected

8.2 before 8.2.2
affected

Timeline

2024-07-10:Initial publication

Credits

Palo Alto Networks thanks the Cyber Defence Center of BITMARCK, and especially Maximilan Pappert for discovering and reporting this issue. finder

References

https://security.paloaltonetworks.com/CVE-2024-5912 vendor-advisory

cve.org CVE-2024-5912

nvd.nist.gov CVE-2024-5912

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-5912
© Copyright 2024 THREATINT. Made in Cyprus with +