CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[Update] Vulnerability in Palo Alto Networks GlobalProtect (April 12, 2024)

unknownknown exploitedpublic exploitCVE-2024-3400
Actively exploited. At least one CVE in this advisory is listed in the CISA Known Exploited Vulnerabilities catalog — exploitation has been observed in the wild. Treat remediation as urgent.
[Update on May 10, 2024] CERT-FR intervened to address a ransomware compromise within a French entity. In the context of this attack, the vulnerability was exploited to then lateralize within the victim's information system and...

CSIRTS triage

vendor: Palo Alto Networksproduct: GlobalProtectOther
What
A vulnerability was exploited in a ransomware attack.
Who is affected
Users of Palo Alto Networks GlobalProtect.
Urgency
Remediation is urgent due to confirmed exploitation in attacks.
Action
Follow the vendor's guidance for securing GlobalProtect.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch GlobalProtect

Get an email when a new GlobalProtect advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-FR Alertes de sécurité (FR · national-cert · site)
Severity
unknown
Published
2024-04-12
Exploitation
Observed in the wild (CISA KEV)
Language
Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2024-ALE-006/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2024-3400coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from CERT-FR Alertes de sécurité