Palo Alto Networks PAN-OS

What it is

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.

Vendor notices and references

• security.paloaltonetworks.com/CVE-2024-9474
• nvd.nist.gov/vuln/detail/CVE-2024-9474

Description and required action as published by CISA. Full record at NVD.