Description
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 10.2.0 – < 10.2.4, 10.1.0 – < 10.1.9 | 11.2 |
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | Prisma Access | — | All |
Advisories 3
- ICSA-24-102-03 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Dec 10, 2024
- SSA-822518 SSA-822518: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Dec 10, 2024
- WID-SEC-2024-1586 PaloAlto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 10, 2024
References
- https://security.paloaltonetworks.com/CVE-2024-5911 vendor-advisory