CVE-2023-0002 MEDIUM

CVE-2023-0002: Cortex XDR Agent: Product Disruption by Local Windows User

Vendor Palo Alto Networks

Product Cortex XDR agent

Weakness CWE-693

Published February 8, 2023

Last update March 25, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

Key dates

02Disclosure timeline

February 8, 2023 CVE published

March 25, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-0002 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/693.html

Related vulnerabilities

Identifiers

CVE CVE-2023-0002

CWE CWE-693

CVSS 5.5 / MEDIUM

Affected versions

Vendor Palo Alto Networks

Product Cortex XDR agent

Affected ≥ 7.5 and < 7.5.101-CE

Vendor Palo Alto Networks

Product Cortex XDR agent

Affected ≥ 5.0 and < 5.0.12.22203

CVE-2023-0002: Cortex XDR Agent: Product Disruption by Local Windows User

01Description

02Disclosure timeline

03References

04Related CVE