{"uuid": "f867fd20-d85e-4553-b3e4-d8a25b3dee24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-3400", "type": "exploited", "source": "https://t.me/theninjaway1337/1525", "content": "State-Sponsored Hackers Exploit Zero-Day to Backdoor Palo Alto Networks Firewalls\n\nA threat actor has successfully exploited a zero-day in Palo Alto Networks firewalls for more than two weeks, malware hunters at Volexity warn.\nPalo Alto Networks disclosed the vulnerability\u00a0on Friday, warning that it was aware of limited in-the-wild exploitation and promising patches within the next two days.\nTracked as\u00a0CVE-2024-3400\u00a0(CVSS score of 10/10), the security defect is described as a command injection issue allowing unauthenticated attackers to execute arbitrary code on impacted firewalls, with root privileges.\n\nhttps://www.securityweek.com/state-sponsored-hackers-exploit-zero-day-to-backdoor-palo-alto-networks-firewalls/", "creation_timestamp": "2024-04-15T00:23:33.000000Z"}