Vulnerability Details CVE-2024-9474
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.
Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.942
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 7.2
Proposed Action
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
Ransomware Campaign
Known
References
- https://security.paloaltonetworks.com/CVE-2024-9474
- https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
- https://github.com/k4nfr3/CVE-2024-9474
- https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9474
Products affected by CVE-2024-9474
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.0
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.1
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.10
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.11
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.12
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.14
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.2
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.3
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.5
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.6
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.7
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.8
-
cpe:2.3:o:paloaltonetworks:pan-os:10.1.9
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.0
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.1
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.10
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.11
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.12
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.2
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.3
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.4
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.5
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.6
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.7
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.8
-
cpe:2.3:o:paloaltonetworks:pan-os:10.2.9
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.0
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.1
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.2
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.3
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.4
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.5
-
cpe:2.3:o:paloaltonetworks:pan-os:11.0.6
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.0
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.1
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.2
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.3
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.4
-
cpe:2.3:o:paloaltonetworks:pan-os:11.1.5
-
cpe:2.3:o:paloaltonetworks:pan-os:11.2.0
-
cpe:2.3:o:paloaltonetworks:pan-os:11.2.1
-
cpe:2.3:o:paloaltonetworks:pan-os:11.2.2
-
cpe:2.3:o:paloaltonetworks:pan-os:11.2.3
-
cpe:2.3:o:paloaltonetworks:pan-os:11.2.4