PALO ALTO NETWORKS WARNS OF EXPLOITED FIREWALL VULNERABILITY

Summary from the TLDR InfoSec newsletter

Threat actors are exploiting a critical command injection vulnerability (CVE-2024-3400) in Palo Alto Networks firewalls that allows unauthenticated attackers to execute arbitrary code with root privileges. The vulnerability, with a severity score of 10/10, affects the GlobalProtect feature in PAN-OS versions 10.2, 11.0, and 11.1.