CVE-2024-9474

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Pan-Os

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

18. Nov 2024

Ausgewertete Quellen

• Hersteller
  https://security.paloaltonetworks.com/CVE-2024-9474
• Hersteller
  https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
• Hinweis
  https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9474
• CISA
  Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
• NVD
  CVE-2024-9474