CVE-2024-0009CWE-940

PAN-OS: Improper IP Address Verification in GlobalProtect Gateway

Medium · published February 14, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-940 · Improper Verification of Source of a Communication Channel
Published
2024-02-14T17:32Z
EPSS history
Timeline
  • 14 FEB 17:32Z
    PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
    cvelistv5