CVE-2024-5912
Cortex XDR Agent: Improper File Signature Verification Checks
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 6.8EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
10 Jul 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber
Affected products
Palo Alto Networks · Cortex XDR AgentWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →