Palo Alto Updates Remediation for Max-Critical Firewall Bug

Palo Alto Networks disclosed CVE-2024-3400, a CVSS 10.0 vulnerability in PAN-OS (10.2, 11.0, 11.1) that enables unauthenticated remote code execution as root and is being actively exploited in the wild with public PoCs; PAN recommends upgrading to fixed PAN-OS hotfixes (e.g., 10.2.9-h1, 11.0.4-h1, 11.1.2-h3), creating a master key and AES-256-GCM encryption, and performing private data reset or factory reset when indicators of compromise (copied running_config.xml or interactive command execution) are observed.