{"id":57682,"date":"2024-11-15T21:07:03","date_gmt":"2024-11-15T21:07:03","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/mystery-palo-alto-networks-hijack-my-firewall-zero-day-now-officially-under-exploit\/"},"modified":"2024-11-15T21:07:03","modified_gmt":"2024-11-15T21:07:03","slug":"mystery-palo-alto-networks-hijack-my-firewall-zero-day-now-officially-under-exploit","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/mystery-palo-alto-networks-hijack-my-firewall-zero-day-now-officially-under-exploit\/","title":{"rendered":"Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit"},"content":{"rendered":"

A critical zero-day vulnerability in Palo Alto Networks’ firewall management interface that can allow an unauthenticated attacker to remotely execute code is now officially under active exploitation.<\/p>\n

According to the equipment maker, the vulnerability requires no user interaction or privileges to exploit, and its attack complexity is deemed “low.” There’s no CVE number assigned to the flaw, which received a 9.3 out of 10 CVSSv4.0 rating, and currently has no patch.<\/p>\n

Exploitation potentially allows a miscreant to take control of a compromised firewall, providing further access into a network. That said, the intruder must be able to reach the firewall’s management interface, either internally or across the internet.<\/p>\n