What is CVE-2023-3280?

CVE-2023-3280 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2023-3280 Cortex XDR Agent: Local Windows User Can Disable the Agent

Which CVE IDs does CVE-2023-3280 cover?

CVE-2023-3280 covers the following CVE IDs: CVE-2023-3280. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2023-3280?

CVE-2023-3280 affects 1 product, including: Cortex XDR Agent.

CVE-2023-3280Medium

CVE-2023-3280 Cortex XDR Agent: Local Windows User Can Disable the Agent

Vendor

Palo Alto Networks Security Advisories

Published

September 13, 2023

Last Modified

September 22, 2023

🔗 CVE IDs covered (1)

CVE-2023-3280 →

📋 Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 7.9.101-CE, Cortex XDR agent 7.9.3, Cortex XDR agent 8.0.2, and all later Cortex XDR agent versions on Windows when the agent has content update 1000 or a later content update version.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2023-3280