Vulnerability Details CVE-2023-0002
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.0%
CVSS Severity
CVSS v3 Score 5.5
References
Products affected by CVE-2023-0002
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:5.0
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:5.0.10
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:5.0.11
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:5.0.12
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.5
-
cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.5.101
-
cpe:2.3:o:microsoft:windows:-