Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um die Authentisierung zu umgehen und anschließend Root-Rechte zu erlangen.
Product
PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.
Vulnerabilities 2
-
Medium 5.9
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or…
KEV Nov 18, 2024 -
Medium 5.9
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this…
KEV Nov 18, 2024
Revision history
-
#4
Report von WatchTower Labs ergänzt
-
#3
Updates von PaloAlto aufgenommen
-
#2
Schwachstelle wird aktiv ausgenutzt
-
#1
Initiale Fassung
References
-
Palo Alto Networks Security Advisories vom 2024-11-10
https://security.paloaltonetworks.com/PAN-SA-2024-0015
-
Palo Alto Networks Security Advisories vom 2024-11-14
https://security.paloaltonetworks.com/PAN-SA-2024-0015
-
Palo Alto Networks Security Advisories / CVE-2024-0012
https://security.paloaltonetworks.com/CVE-2024-0012
-
Palo Alto Networks Security Advisories / CVE-2024-9474
https://security.paloaltonetworks.com/CVE-2024-9474
-
Threat Brief: Operation Lunar Peek, Activity Related to CVE-2024-0012
https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
-
WatchTower Labs Vulnerability Research vom 2024-11-21
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/