Back to the CVE list
CVE-2024-3400 CISA KEV · Actively exploitedLinked to ransomware

Palo Alto Networks PAN-OS Command Injection Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

2 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation

Exploit referenceSource updated: 21.04.2024 00:00:00

Nuclei: GlobalProtect - OS Command Injection

Exploit reference

CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-

Public PoC

Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance.

Public PoC

Reproduction of cve-2024-3400-panos_rce_reproduction

Public PoC

CTT-PAN-OS-Exploit – CVE-2024-3400 (CVSS 10.0) with Convergent Time Theory enhancement. Uses α = 0.0302011 temporal dispersion, 33-layer phase resonance cascade, and 11 ns temporal wedge filtering to exploit Palo Alto GlobalProtect command injection. The payload is distributed across 33 temporal layers with exponential priority d

Public PoC

wa6n3r/CVE-2024-3400

Public PoC

Investigation of a PAN-OS CVE-2024-3400 command injection attempt, analyzing payload delivery, internal processing, and execution validation based on log evidence.

Public PoC

Have we not learnt from HoneyPoC?

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-3400"