CVE-2024-8690 — MEDIUM (4.4)

Vulnerability Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

CVSS Score

4.4

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Paloaltonetworks	Cortex Xdr Agent	7.9.102
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-440

References

https://security.paloaltonetworks.com/CVE-2024-8690Vendor Advisory

FAQ

What is CVE-2024-8690?

CVE-2024-8690 is a vulnerability with a CVSS score of 4.4 (MEDIUM). A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leverage...

How severe is CVE-2024-8690?

CVE-2024-8690 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-8690?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Cortex Xdr Agent, Microsoft Windows.