CVE-2024-5912CWE-347

Cortex XDR Agent: Improper File Signature Verification Checks

Medium · published July 10, 2024

CVSS v4.0
6.8
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber
EPSS
0.00128 · 2.2th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2024-07-10T18:40Z
EPSS history
Timeline
  • 10 JUL 18:40Z
    Cortex XDR Agent: Improper File Signature Verification Checks
    cvelistv5