Palo Alto Networks Autonomous Digital Experience Manager Certificate Validation Vulnerability Allowing Arbitrary Code Execution

A certificate validation vulnerability exists in Palo Alto Networks Autonomous Digital Experience Manager for Windows, versions 5.10.0 prior to 5.10.14. This vulnerability allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code with high-level system privileges, potentially allowing an attacker to perform any actions that the system account can.

Remediation

Users can upgrade to version 5.10.14 or later to address this vulnerability. Instructions for downloading the update can be found on the Palo Alto Networks support site.