CVE-2024-3400

Estado: AnalizadaCrítica (10)⚠ Explotación activa💥 Exploit

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.

Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Puntuación base: 10

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 100%
Percentil entre todas las CVEs puntuadas: 100
Fecha de la puntuación: 29/9/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CISA KEV — explotada activamente

Añadida al catálogo: 12/4/2024
Plazo de remediación: 19/4/2024
Uso conocido en ransomware: Known

💥 Exploits públicos

Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.

Módulo de Metasploit (exploit fiable y al alcance de cualquiera) · Palo Alto Networks PAN-OS Unauthenticated Remote Code Execution
Publicado en Exploit-DB · Palo Alto PAN-OS < v11.1.2-h3 - Command Injection and Arbitrary File Creation (21/4/2024)
Plantilla de Nuclei (detección automática y masiva) · GlobalProtect - OS Command Injection
Prueba de concepto en GitHub (no verificada) · Lista de pruebas de concepto en GitHub

⚠️ Las pruebas de concepto de GitHub no están verificadas: algunas son falsas o contienen malware. No las ejecute nunca fuera de un laboratorio aislado.

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1190 Exploit Public-Facing Applicationinitial access95 %
Impacto principalT1059 Command and Scripting Interpreterexecution95 %
Impacto secundarioT1548.002 Bypass User Account Controlprivilege escalation85 %

Vulnerabilidad crítica de inyección de comandos en servicio expuesto (GlobalProtect) sin autenticación requerida (PR:N, AV:N). Permite ejecución de código arbitrario con privilegios root. Explotada activamente en ataques ransomware.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account Management Audit Update Software Vulnerability Scanning Restrict Web-Based Content Network Segmentation

Tecnologías afectadas (1)

Paloaltonetworks — Pan-os

CWE

CWE-20, CWE-77
CWE-77

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2024-3400",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-3400",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-04-17T04:00:13.543064Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@paloaltonetworks.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@paloaltonetworks.com",
      "affectedData": [
        {
          "vendor": "Palo Alto Networks",
          "product": "PAN-OS",
          "versions": [
            {
              "status": "unaffected",
              "version": "9.0.0"
            },
            {
              "status": "unaffected",
              "version": "9.1.0"
            },
            {
              "status": "unaffected",
              "version": "10.0.0"
            },
            {
              "status": "unaffected",
              "version": "10.1.0"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "10.2.9-h1",
                  "status": "unaffected"
                }
              ],
              "version": "10.2.0",
              "lessThan": "10.2.9-h1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "11.0.4-h1",
                  "status": "unaffected"
                }
              ],
              "version": "11.0.0",
              "lessThan": "11.0.4-h1",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "changes": [
                {
                  "at": "11.1.2-h3",
                  "status": "unaffected"
                }
              ],
              "version": "11.1.0",
              "lessThan": "11.1.2-h3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Palo Alto Networks",
          "product": "Cloud NGFW",
          "versions": [
            {
              "status": "unaffected",
              "version": "All"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Palo Alto Networks",
          "product": "Prisma Access",
          "versions": [
            {
              "status": "unaffected",
              "version": "All"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:*:*:*:*:*:*:*"
          ],
          "vendor": "paloaltonetworks",
          "product": "pan-os",
          "versions": [
            {
              "status": "affected",
              "version": "10.2.0",
              "lessThan": "10.2.9-h1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:*:*:*:*:*:*:*"
          ],
          "vendor": "paloaltonetworks",
          "product": "pan-os",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.0",
              "lessThan": "11.0.4-h1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:*"
          ],
          "vendor": "paloaltonetworks",
          "product": "pan-os",
          "versions": [
            {
              "status": "affected",
              "version": "11.1.0",
              "lessThan": "11.1.2-h3",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-12T08:15:06.230",
  "references": [
    {
      "url": "https://security.paloaltonetworks.com/CVE-2024-3400",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@paloaltonetworks.com"
    },
    {
      "url": "https://unit42.paloaltonetworks.com/cve-2024-3400/",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "psirt@paloaltonetworks.com"
    },
    {
      "url": "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/",
      "tags": [
        "Technical Description",
        "Vendor Advisory"
      ],
      "source": "psirt@paloaltonetworks.com"
    },
    {
      "url": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "psirt@paloaltonetworks.com"
    },
    {
      "url": "https://security.paloaltonetworks.com/CVE-2024-3400",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://unit42.paloaltonetworks.com/cve-2024-3400/",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.paloaltonetworks.com/blog/2024/04/more-on-the-pan-os-cve/",
      "tags": [
        "Technical Description",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3400",
      "tags": [
        "US Government Resource"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@paloaltonetworks.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        },
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.\n\nCloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de inyección de comandos en la función GlobalProtect del software PAN-OS de Palo Alto Networks para versiones específicas de PAN-OS y configuraciones de funciones distintas puede permitir que un atacante no autenticado ejecute código arbitrario con privilegios de root en el firewall. Cloud NGFW, dispositivos Panorama y Prisma Access no se ven afectados por esta vulnerabilidad."
    }
  ],
  "lastModified": "2026-06-17T07:44:11.533",
  "cisaActionDue": "2024-04-19",
  "cisaExploitAdd": "2024-04-12",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F54B40AC-A555-4447-B147-576D17CAB12A"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEC5E9D4-1B58-4C89-8B68-47F996C04234"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.0:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDDEB31F-EFDD-4A66-9687-7FFCF8EFDAAF"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0F30A71D-281E-4BF8-803F-05B517399C6A"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.1:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5CB7F608-4F03-46EF-A27E-4C8F5363FF5E"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33340036-0E81-41CD-AFC4-480F509F8DD2"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D7986DC-187D-4798-8B4A-7D23DF0EE0C8"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D1FAC78-7714-48EC-9FDB-1A565814B958"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.2:h4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B86668F-7BC5-4F50-AE80-E99F6DE370D7"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98F219AD-A22F-47AC-88FE-B3F75AE059AC"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A79C13FD-C909-4FEE-AE24-A085E953D887"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7FCFB45-1150-4F9C-8E4B-3DB2ADE89454"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50F0801B-FC9F-4018-A837-CAB8CB9C9CD4"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8C4AC1F-4FF0-4500-AFBB-F29613358156"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.3:h9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FE16CA7-422A-4A53-8DDC-CB3A982C154F"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "135588B5-6771-46A3-98B0-39B4873FD6FD"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6ADF2A5B-DC55-44B1-A033-4A29C32AB5B1"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "20673F1E-733D-41C4-A644-C482431C26EC"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "156DA55E-4152-47BF-A067-136EEC9ADE22"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2D2F5C4-7ACC-4514-ADBD-3948158B93CC"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AEE36B5C-262E-42B0-B3C1-5EAA003E84B7"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "619AD3DA-9384-4CC5-9F3D-66DB5A055BCB"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.5:h4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1360C403-BCD8-420E-B907-4127E12B3A3A"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3AF86BD-C317-45C7-96B6-34BD82579FDB"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.6:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09F61A78-1B7C-41F1-A0D8-0AB1E7ADF68C"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8C42D98-CF8F-456B-9D57-80BBDC2C8E74"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3AAD4BA-22DD-43D3-91F1-8A6F5FBBF029"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "776E06EC-2FDA-4664-AB43-9F6BE9B897CA"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.7:h6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CBE09375-A863-42FF-813F-C20679D7C45C"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D64390F-F870-4DBF-B0FE-BCDFE58C8685"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D814F3A3-5E9D-426D-A654-1346D9ECE9B3"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BB72E15-486F-491F-A08D-E1AC2C8AB121"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5E7EFD5-2179-45BF-BF5B-197B66903D9C"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EF4AE4F-36F3-4923-AE1E-DE9E036D4E2F"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10A69DAE-5AD5-4E1C-9DF0-C7B7BB023B66"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFAA23E0-232D-42AA-A5A9-87063348D0DF"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:h3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50EA3EAC-91BD-4B30-A885-BED95B48CC3F"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C25AD9EA-7DDC-4704-9D7C-A1D6C1F5F696"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2416C2EF-1085-493D-84D7-18F7577D4A01"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E1D99D8-300C-4985-835C-3EBA2BFC098B"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.2:h3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B689FAD-0469-4222-A7EF-3268CCDA43A7"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D27A5944-FCD8-44AB-9986-0FCA24E81F5B"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4425F47-446D-49C1-AAC9-5F5B7E5422A6"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0ED8E63-B8F0-482A-A8A9-13C21D60EEB9"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.3:h5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9110DBFB-07D6-4D64-A8AA-C0E7A7037A87"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "723956E9-11FD-42A0-8A35-C1FDE9E1877C"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82FBA0C5-1385-42DD-A85D-DA1D818D0EF3"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FAC22EB-FB4C-4E9D-99A1-D4902262ED06"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.0:h2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3D65F1C-B055-408E-B7F2-512F13BEDCA6"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DC41D6E-8632-44BB-BC05-7C22A02306A2"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F7627B3-A463-4570-BA23-663FEB7B4A8B"
            },
            {
              "criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.1.2:h1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "275872C1-1EBB-4447-8C9F-347F757BFF42"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@paloaltonetworks.com",
  "cisaRequiredAction": "Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.",
  "cisaVulnerabilityName": "Palo Alto Networks PAN-OS Command Injection Vulnerability"
}