CVE-2024-8690

Published Sep 11, 2024

Last updated 5 months ago

Palo Alto Networks

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-8690 is a vulnerability affecting the Palo Alto Networks Cortex XDR agent on Windows devices. It stems from an issue within a detection mechanism of the agent. The vulnerability allows a user with Windows administrator privileges to disable the Cortex XDR agent. This could be exploited by malware to disable the agent and subsequently perform malicious activities.

Description: A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Source: psirt@paloaltonetworks.com
NVD status: Analyzed

Risk scores

CVSS 4.0

Type: Secondary
Base score: 5.6
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
Severity: MEDIUM

CVSS 3.1

Type: Primary
Base score: 4.4
Impact score: 3.6
Exploitability score: 0.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: NVD-CWE-Other
psirt@paloaltonetworks.com: CWE-440

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.9.102:*:*:*:critical_environment:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DAD96F99-F6DD-4310-AC22-23354CB10FF8"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]