UpHeron
All vulnerabilities

Servers and applications

CVE-2024-0012

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .…

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 18 Nov 2024.

Severity
Critical 9.3
Published
18 Nov 2024
Last changed
4 Aug 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • Version 11.2.4
  • Version 11.2.3
  • Version 11.2.2-h1
  • Version 11.2.2
All 117 release lines
  • Version 10.2.0
  • Version 10.2.0-h1
  • Version 10.2.0-h2
  • Version 10.2.0-h3
  • Version 10.2.1
  • Version 10.2.1-h1
  • Version 10.2.1-h2
  • Version 10.2.2
  • Version 10.2.2-h1
  • Version 10.2.2-h2
  • Version 10.2.2-h4
  • Version 10.2.2-h5
  • Version 10.2.3
  • Version 10.2.3-h2
  • Version 10.2.3-h4
  • Version 10.2.3-h9
  • Version 10.2.3-h11
  • Version 10.2.3-h12
  • Version 10.2.3-h13
  • Version 10.2.4
  • Version 10.2.4-h2
  • Version 10.2.4-h3
  • Version 10.2.4-h4
  • Version 10.2.4-h10
  • Version 10.2.4-h16
  • Version 10.2.5
  • Version 10.2.5-h1
  • Version 10.2.5-h4
  • Version 10.2.5-h6
  • Version 10.2.6
  • Version 10.2.6-h1
  • Version 10.2.6-h3
  • Version 10.2.7
  • Version 10.2.7-h1
  • Version 10.2.7-h3
  • Version 10.2.7-h6
  • Version 10.2.7-h8
  • Version 10.2.7-h12
  • Version 10.2.7-h16
  • Version 10.2.8
  • Version 10.2.8-h3
  • Version 10.2.8-h4
  • Version 10.2.8-h10
  • Version 10.2.8-h13
  • Version 10.2.9
  • Version 10.2.9-h1
  • Version 10.2.9-h9
  • Version 10.2.9-h11
  • Version 10.2.9-h14
  • Version 10.2.10
  • Version 10.2.10-h2
  • Version 10.2.10-h3
  • Version 10.2.10-h4
  • Version 10.2.10-h5
  • Version 10.2.10-h7
  • Version 10.2.11
  • Version 10.2.11-h1
  • Version 10.2.11-h2
  • Version 10.2.11-h3
  • Version 10.2.11-h4
  • Version 10.2.12
  • Version 10.2.12-h1
  • Version 11.0.0
  • Version 11.0.0-h1
  • Version 11.0.0-h2
  • Version 11.0.0-h3
  • Version 11.0.1
  • Version 11.0.1-h2
  • Version 11.0.1-h3
  • Version 11.0.1-h4
  • Version 11.0.2
  • Version 11.0.2-h1
  • Version 11.0.2-h2
  • Version 11.0.2-h3
  • Version 11.0.2-h4
  • Version 11.0.3
  • Version 11.0.3-h1
  • Version 11.0.3-h3
  • Version 11.0.3-h5
  • Version 11.0.3-h10
  • Version 11.0.3-h12
  • Version 11.0.4
  • Version 11.0.4-h1
  • Version 11.0.4-h2
  • Version 11.0.4-h5
  • Version 11.0.5
  • Version 11.0.5-h1
  • Version 11.0.6
  • Version 11.1.0
  • Version 11.1.0-h1
  • Version 11.1.0-h2
  • Version 11.1.0-h3
  • Version 11.1.1
  • Version 11.1.1-h1
  • Version 11.1.2
  • Version 11.1.2-h1
  • Version 11.1.2-h3
  • Version 11.1.2-h4
  • Version 11.1.2-h9
  • Version 11.1.2-h12
  • Version 11.1.2-h14
  • Version 11.1.3
  • Version 11.1.3-h1
  • Version 11.1.3-h2
  • Version 11.1.3-h4
  • Version 11.1.3-h6
  • Version 11.1.3-h10
  • Version 11.1.4
  • Version 11.1.4-h1
  • Version 11.1.4-h4
  • Version 11.1.5
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.2.2
  • Version 11.2.2-h1
  • Version 11.2.3
  • Version 11.2.4

Known exploited

CISA name
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.
Due for US agencies
9 Dec 2024
Used in ransomware
Yes, known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-0012
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-0012