by Kastro
Paper/Archive/CVE-2024-5914

CVE-2024-5914

Palo Alto Networks Cortex XSOAR CommonScripts — Cortex XSOAR: Command Injection in CommonScripts Pack

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.8.688 × 2013.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary commands within the context of an integration container.

Affected

ProductAffectedFixed inSource
Cortex XSOAR CommonScripts1.12 – < 1.12.331.12.33CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
palo_alto (CNA)7.0CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:N/AU:N/R:U/V:D/RE:M/U:Amber
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.paloaltonetworks.com/CVE-2024-5914