What is CVE-2024-8690?

CVE-2024-8690 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2024-8690 Cortex XDR Agent: Local Windows Administrator Can Disable the Agent

Which CVE IDs does CVE-2024-8690 cover?

CVE-2024-8690 covers the following CVE IDs: CVE-2024-8690. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-8690?

CVE-2024-8690 affects 1 product, including: Cortex XDR Agent.

CVE-2024-8690Medium

CVE-2024-8690 Cortex XDR Agent: Local Windows Administrator Can Disable the Agent

Vendor

Palo Alto Networks Security Advisories

Published

September 11, 2024

Last Modified

September 11, 2024

🔗 CVE IDs covered (1)

CVE-2024-8690 →

📋 Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR Agent 8.2, and all later Cortex XDR Agent versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-8690