{"id":910,"date":"2024-04-15T08:59:21","date_gmt":"2024-04-15T08:59:21","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/ranjivost-nultog-dana-palo-alto-vatrozida-omogucuje-udaljeno-izvrsavanje-koda\/"},"modified":"2026-11-04T08:56:09","modified_gmt":"2026-11-04T08:56:09","slug":"ranjivost-nultog-dana-palo-alto-vatrozida-omogucuje-udaljeno-izvrsavanje-koda","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/ranjivost-nultog-dana-palo-alto-vatrozida-omogucuje-udaljeno-izvrsavanje-koda\/","title":{"rendered":"Ranjivost nultog dana PALO ALTO vatrozida omogu\u0107uje udaljeno izvr\u0161avanje k\u00f4da"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.paloaltonetworks.com\/\" target=\"_blank\" rel=\"noreferrer noopener\" title=\"https:\/\/www.paloaltonetworks.com\/\">Palo Alto Networks<\/a> je upozorio da napada\u010di aktivno iskori\u0161tavaju ranjivost njihovog PAN-OS vatrozida.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Radi se&nbsp; o kriti\u010dnoj ranjivosti CVE-2024-3400 koja potencijalno omogu\u0107uje udaljenom, neautenficiranom napada\u010du izvr\u0161avanje proizvoljnog programskog koda (RCE)<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ranjive verzije proizvoda:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Verzija<\/td><td>Ranjivi sustavi<\/td><td>Sustavi koji nisu ranjivi<\/td><\/tr><tr><td>Cloud NGFW<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><tr><td>PAN-OS 11.1<\/td><td>&lt; 11.1.2-h3<\/td><td>&gt;= 11.1.2-h3<\/td><\/tr><tr><td>PAN-OS 11.0<\/td><td>&lt; 11.0.4-h1<\/td><td>&gt;= 11.0.4-h1<\/td><\/tr><tr><td>PAN-OS 10.2<\/td><td>&lt; 10.2.9-h1<\/td><td>&gt;= 10.2.9-h1<\/td><\/tr><tr><td>PAN-OS 10.1<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><tr><td>PAN-OS 10.0<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><tr><td>PAN-OS 9.1<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><tr><td>PAN-OS 9.0<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><tr><td>Prisma Acess<\/td><td>N\/A<\/td><td>Svi<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Nacionalni CERT preporu\u010duje \u0161to br\u017eu primjenu zakrpa i\/ili mjera mitigacije.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u0161e o ranjivosti, mjerama mitigacije te indikatorima kompromitacije pro\u010ditajte na:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/security.paloaltonetworks.com\/CVE-2024-3400\">https:\/\/security.paloaltonetworks.com\/CVE-2024-3400<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.volexity.com\/blog\/2024\/04\/12\/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400\/\">https:\/\/www.volexity.com\/blog\/2024\/04\/12\/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400\/<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Palo Alto Networks je upozorio da napada\u010di aktivno iskori\u0161tavaju ranjivost njihovog PAN-OS vatrozida. Radi se&nbsp; o kriti\u010dnoj ranjivosti CVE-2024-3400 koja potencijalno omogu\u0107uje udaljenom, neautenficiranom napada\u010du izvr\u0161avanje proizvoljnog programskog koda (RCE). Ranjive verzije proizvoda: Verzija Ranjivi sustavi Sustavi koji nisu ranjivi Cloud NGFW N\/A Svi PAN-OS 11.1 &lt; 11.1.2-h3 &gt;= 11.1.2-h3 PAN-OS 11.0 &lt; 11.0.4-h1 &gt;= [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1455,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-910","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/910","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=910"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/910\/revisions"}],"predecessor-version":[{"id":1456,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/910\/revisions\/1456"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1455"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=910"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=910"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=910"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=910"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=910"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}