VM Analysis

CVE-2024-3400

PAN-OS GlobalProtect Command Injection

Illustrative, frozen demo data. Scores and catalog status are not current intelligence.

Priority assessment

Immediate Action

Apply vendor fixes or mitigations, consider asset criticality, and verify whether compromise occurred.

CVSS 10.0 EPSS 94.50% Listed in KEV

CISA lists this vulnerability as known exploited. Confirm exposure and prioritize remediation.

Global priority evidence

  • Known exploited: CISA KEV
  • Critical severity: CVSS
  • High exploitation probability: EPSS
  • Vendor reference identified; verify remediation
  • Affected product not confirmed
ApplicabilityPotentially applicable vendor guidance; installed product and version still need confirmation.

Vulnerability overview

Core NVD metadata for the selected vulnerability.

DescriptionA command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect gateway and portal may allow an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.

Dates and weaknesses

PublishedApr 12, 2024
Last ModifiedMay 10, 2024
  • CWE-77: Command Injection
  • CWE-78: OS Command Injection

Vendor remediation

The strongest available remediation source is shown below. Confirm the installed OS, product, and version before treating it as applicable.

PaloaltonetworksVendor-supported platformSource identified

How to remediate

Open the official vendor source, confirm the affected release, and apply the fixed package, update, or release identified there.

Product / componentAffected product from the vendor advisory
Affected versionsNot available
Update targetNot available

Authoritative source

https://security.paloaltonetworks.com/CVE-2024-3400

Asset context helps filter guidance; confirm applicability against the vendor advisory.

CVSS · Technical severity

Base scoring from the preferred metric available in NVD.

10.0

CRITICALv3.1
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability Score3.9
Impact Score6.0

EPSS · Exploitation probability

FIRST exploitation probability enrichment.

94.50%

Available
EPSS Score94.50%
Percentile99.80%
Score DateFeb 28, 2026

KEV · Known exploitation

CISA known exploited vulnerability catalog status.

Listed in KEV
VendorPalo Alto Networks
ProductPAN-OS
Vulnerability NamePAN-OS GlobalProtect Command Injection
Date AddedApr 12, 2024
Due DateMay 3, 2024
Required ActionApply the vendor fix or mitigations immediately and verify device integrity.
NotesThis issue has been observed in active exploitation against internet-facing firewalls.

Sources and freshness

NVDok
EPSSok
KEVok
NVD last modifiedNot available
EPSS dateNot available
KEV date addedNot available
Vendor verifiedNot available

Supporting sources (3)

Vendor remediation supporting sources (1)
  • Paloaltonetworks — Patch Source identified Primary source Open source
Check your asset

Filter vendor guidance using analyst-provided context. This does not prove the asset is vulnerable and is not persisted.

Handoff summary

Copy this summary into change management or an analyst handoff. It does not claim confirmed asset exposure.