Palo Alto Security Updates – 14 July 2024

The addressed vulnerabilities could allow the attacker to elevate privilege to root access, bypass security restrictions, execute untrusted software without being detected or blocked, and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. Palo Alto Expedition Missing Authentication Vulnerability (CVE-2024-5910):

• CVSS: 9.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Access

2. Palo Alto Cortex XDR Agent Improper File Signature Verification Checks Vulnerability (CVE-2024-5912):

• CVSS: 6.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Bypass Security

Sample of the affected products:

• Cloud NGFW.
• PAN-OS.
• Cortex XDR Agent.
• Prisma Access.
• Palo Alto Expedition and Palo Alto Expedition VM.