What is CVE-2024-5909?

CVE-2024-5909 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2024-5909 Cortex XDR Agent: Local Windows User Can Disable the Agent

Which CVE IDs does CVE-2024-5909 cover?

CVE-2024-5909 covers the following CVE IDs: CVE-2024-5909. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-5909?

CVE-2024-5909 affects 1 product, including: Cortex XDR Agent.

CVE-2024-5909Medium

CVE-2024-5909 Cortex XDR Agent: Local Windows User Can Disable the Agent

Vendor

Palo Alto Networks Security Advisories

Published

June 12, 2024

Last Modified

June 12, 2024

🔗 CVE IDs covered (1)

CVE-2024-5909 →

📋 Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 7.9.102-CE, Cortex XDR agent 8.1.2, Cortex XDR agent 8.2.1, and all later Cortex XDR agent versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-5909