coldbraid

CVE-2024-9474 Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.

CVSS
not scored

CWE-77

On CISA’s exploited list

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Added
2024-11-18
Federal patch deadline
2024-12-09
Ransomware use
known