CVE-2024-9469: Cortex XDR Agent: Local Windows User Can Disable the Agent (Severity: MEDIUM)
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9469?
CVE-2024-9469 has been classified as a significant vulnerability due to its potential to allow malware to disable important security features.
How do I fix CVE-2024-9469?
To mitigate CVE-2024-9469, ensure that the Cortex XDR Agent is updated to a version higher than 8.4.0 or 7.9.102.
Who is affected by CVE-2024-9469?
CVE-2024-9469 affects users of the Palo Alto Networks Cortex XDR Agent on Windows devices with specific versions.
What are the implications of CVE-2024-9469?
The implications of CVE-2024-9469 include an increased risk of malware disabling security agents, leading to potential data breaches.
Is my version of Cortex XDR Agent at risk from CVE-2024-9469?
If you are running Cortex XDR Agent versions 7.9 through 7.9.102 or 8.3.0, then your system is at risk from CVE-2024-9469.