Medium severity · published Jul 10, 2024
CVE-2024-5912
Cortex XDR Agent: Improper File Signature Verification Checks
6.8
CVSS
0.1%
EPSS
No
On KEV
Description
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CX
Cortex XDR Agent · Palo Alto Networks
7.9-CE before 7.9.102-CE; 8.2 before 8.2.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5912
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5912
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2024-5912
More from Cortex XDR Agent
7.0
CVE-2024-5907
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
5.5
CVE-2024-5909
Cortex XDR Agent: Local Windows User Can Disable the Agent
4.4
CVE-2026-0232
Cortex XDR Agent: Local Administrator can disable the agent on Windows
4.4
CVE-2024-8690
Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
4.4
CVE-2024-5905
Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent