← Back to browse · API

CVE-2024-9474

Severity
MEDIUM
CVSS
6.9
EPSS
0.94766
Risk score
85.77
CISA KEV
Yes
PoC
No
Published
2024-11-18
Modified
2024-11-18
First seen
2026-08-05
Aliases
EUVD-2024-50354, GHSA-CGVW-JH5J-MGQ3
Products
Palo Alto Networks:PAN-OS, Palo Alto Networks:PAN-OS 10.1.0 <10.1.14-h6, Palo Alto Networks:PAN-OS 10.2.0 <10.2.12-h2, Palo Alto Networks:PAN-OS 11.0.0 <11.0.6-h1, Palo Alto Networks:PAN-OS 11.1.0 <11.1.5-h1, Palo Alto Networks:PAN-OS 11.2.0 <11.2.4-h1, paloaltonetworks:pan-os
Sources
nvd CVE-2024-9474
euvd EUVD-2024-50354
cisa.gov CVE-2024-9474

Description

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.

References