Rewterz

Rewterz Threat Advisory – Multiple Fortinet FortiTester Vulnerabilities

September 15, 2023
Rewterz

Rewterz Threat Advisory – Multiple Fortinet Products Vulnerabilities

September 15, 2023

Rewterz Threat Advisory – CVE-2023-3280 – Palo Alto Networks Cortex XDR Agent Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-3280

Palo Alto Networks Cortex XDR Agent is vulnerable to a denial of service, caused by a flaw in the protection mechanism. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to disable the agent, and results in a denial of service condition.

Impact

  • Denial of Service

Indicators Of Compromise

CVE

  • CVE-2023-3280

Affected Vendors

Palo Alto

Affected Products

  • Palo Alto Networks Cortex XDR Agent 7.9-CE
  • Palo Alto Networks Cortex XDR Agent 7.9
  • Palo Alto Networks Cortex XDR Agent 7.5 CE
  • Palo Alto Networks Cortex XDR Agent 5.0

Remediation

Refer to Palo Alto Networks Security Advisories for patch, upgrade or suggested workaround information.

Palo Alto Networks Security Advisories

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.