CVE-2024-3400 PoC — PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect

Source

Associated Vulnerability

Description

Python script to check Palo Alto firewalls for CVE-2024-3400 exploit attempts

Readme

# PAN-OS CVE-2024-3400 Check

## Overview
**[FOR INTERNAL USE ONLY]**

This script checks for evidence of the CVE-2024-3400 PAN-OS exploit on Palo Alto Networks firewalls.<br>
<br>
**CVE:** https://security.paloaltonetworks.com/CVE-2024-3400<br>
**IOCs:** https://otx.alienvault.com/pulse/66198c3b58d2dd2ad4043bc6/

## Requirements

- Python 3.6+
- `netmiko` library
- `tqdm` library

## Installation

1. Clone the repository: ```git clone https://github.com/swaybs/CVE-2024-3400.git```
2. Navigate to the project directory: ```cd cve-2024-3400```
3. Install the dependencies using pip: ```pip install -r requirements.txt```

## Usage

1. Edit the script to replace the placeholder values with your actual firewall credentials and command to run.
2. Run the script: ```python check_cve.py```

File Snapshot

 [4.0K]  /data/pocs/49e4de7687ac6fd975322014f56787f6079ea128
├── [2.0K]  check_cve.py
├── [1.0K]  LICENSE
├── [ 795]  README.md
└── [  27]  requirements.txt

0 directories, 4 files

Remarks