Description
Palo Alto Networks PAN-OS Global Protect存在命令注入漏洞，此漏洞是由于/api/接口对用户的请求验证不当导致的。
Palo Alto Networks PAN-OS GlobalProtect CVE-2024-3400 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.paloaltonetworks.com/CVE-2024-3400
https://unit42.paloaltonetworks.com/cve-2024-3400/
https://nvd.nist.gov/vuln/detail/cve-2024-3400
https://teamt5.org/tw/posts/alerts-of-exploiting-palo-alto-global-protect-cve-2024-3400/
https://inc.xmu.edu.cn/inc2024/info/1031/6551.htm
https://isecurity.huawei.com/sec/web/viewAlert.do?id=2495
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11037
https://www.secrss.com/articles/65257?app=1
https://www.twcert.org.tw/tw/cp-104-7741-c91ab-1.html
https://qkl.seebug.org/vuldb/ssvid-99829
https://www.ithome.com.tw/news/162282
https://avd.aliyun.com/detail?id=AVD-2024-3400
https://bestwing.me/PanOS-CVE-2024-3400-command-inject.html
https://www.facebook.com/ApertexTechnology/posts/%E6%BC%8F%E6%B4%9E%E5%91%8A%E8%AD%A6-palo-alto-networks-pan-os-%E4%B8%AD%E7%9A%84-cve-2024-3400-%E6%BC%8F%E6%B4%9E%E5%B7%B2%E8%A2%AB-apt-%E7%B5%84%E7%B9%94-slime60-%E5%92%8C-slime61-%E5%88%A9%E7%94%A8/970006008255489/
https://isms.csu.edu.tw/p/406-1147-14087,r22.php?Lang=zh-tw
https://www.levelblue.com/blogs/spiderlabs-blog/cve-2024-3400-pan-os-command-injection-vulnerability-in-globalprotect-gateway
https://www.picussecurity.com/resource/blog/cve-2024-3400-palo-alto-pan-os-command-injection-vulnerability-explained
https://github.com/ihebski/CVE-2024-3400