CISA Catalog Included Palo Alto Networks PAN-OS Vulnerability

This flaw, CVE-2024-3400 [CVSS 10], allows unauthenticated attackers to execute arbitrary code with root privileges on affected devices. The vulnerability impacts PAN-OS versions 10.2, 11.0, and 11.1 on firewalls. It uses either GlobalProtect gateway, portal, or both, with device telemetry enabled. While the exact commands remain unknown, that the attackers attempted to install a secondary, Python-based backdoor on compromised devices.