What is CVE-2024-9469?

CVE-2024-9469 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent

Which CVE IDs does CVE-2024-9469 cover?

CVE-2024-9469 covers the following CVE IDs: CVE-2024-9469. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-9469?

CVE-2024-9469 affects 1 product, including: Cortex XDR Agent.

CVE-2024-9469Medium

CVE-2024-9469 Cortex XDR Agent: Local Windows User Can Disable the Agent

Vendor

Palo Alto Networks Security Advisories

Published

October 9, 2024

Last Modified

October 9, 2024

🔗 CVE IDs covered (1)

CVE-2024-9469 →

📋 Description

A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR Agent 7.9.102-CE, Cortex XDR Agent 8.3.1, Cortex XDR Agent 8.4.1, and all later Cortex XDR Agent versions.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-9469