Skip to content
OpenAdvisories
Medium WID-SEC-2024-1586 2 CVEs

PaloAlto Networks PAN-OS: Mehrere Schwachstellen

Published Jul 10, 2024 · Updated Jul 10, 2024 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um einen Denial of Service Angriff durchzuführen und erweiterte Rechte zu erlangen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 2

  • High 7.0
    CVE-2024-5911

    PAN-OS: File Upload Vulnerability in the Panorama Web Interface

    An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panoram…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.1
    CVE-2024-5913

    PAN-OS: Improper Input Validation Vulnerability in PAN-OS

    An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References