What is CVE-2024-5912?

CVE-2024-5912 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2024-5912 Cortex XDR Agent: Improper File Signature Verification Checks

Which CVE IDs does CVE-2024-5912 cover?

CVE-2024-5912 covers the following CVE IDs: CVE-2024-5912. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-5912?

CVE-2024-5912 affects 1 product, including: Cortex XDR Agent.

CVE-2024-5912Medium

CVE-2024-5912 Cortex XDR Agent: Improper File Signature Verification Checks

Vendor

Palo Alto Networks Security Advisories

Published

July 10, 2024

Last Modified

July 10, 2024

🔗 CVE IDs covered (1)

CVE-2024-5912 →

📋 Description

An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR agent 7.9.102-CE, Cortex XDR agent 8.1.3, Cortex XDR agent 8.2.2, and all later Cortex XDR agent versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-5912