CVE-2021-3042: fallo de gravedad alta en Palo Alto Networks Cortex XDR Agent
Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.2%
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. Exploiting this vulnerability requires the user to have file creation privilege in the Windows root directory (such as C:\). This issue impacts: All versions of Cortex XDR agent 6.1 without content update 181 or a later version; All versions of Cortex XDR agent 7.2 without content update 181 or a later version; All versions of Cortex XDR agent 7.3 without content update 181 or a later version. Cortex XDR agent 5.0 versions are not impacted by this issue. Content updates are required to resolve this issue and are automatically applied for the agent.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Palo Alto Networks · Cortex XDR AgentCVEs relacionadas — Palo Alto Networks Cortex XDR Agent
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-5909MEDIUMCortex XDR Agent: Local Windows User Can Disable the AgentEPSS 0.4%CVE-2020-2049HIGHCortex XDR Agent: Improper control of loaded DLL leads to local privilege escalationEPSS 0.3%CVE-2023-3280MEDIUMCortex XDR Agent: Local Windows User Can Disable the AgentEPSS 0.3%CVE-2020-2020MEDIUMCortex XDR Agent: Exceptional condition denial-of-service (DoS)EPSS 0.3%CVE-2022-0014MEDIUMCortex XDR Agent: Unintended Program Execution When Using Live Terminal SessionEPSS 0.3%CVE-2022-0012MEDIUMCortex XDR Agent: Local Arbitrary File Deletion VulnerabilityEPSS 0.3%