CVE-2024-9474 Palo Alto Networks PAN-OS
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
- CVSS
- not scored
On CISA’s exploited list
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
- Added
- 2024-11-18
- Federal patch deadline
- 2024-12-09
- Ransomware use
- known