Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-9474

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Published

2024-11-18T16:15:29.780

Last Modified

2025-10-21T23:16:44.487

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System paloaltonetworks pan-os < 10.1.14 Yes
Operating System paloaltonetworks pan-os < 10.2.12 Yes
Operating System paloaltonetworks pan-os < 11.0.6 Yes
Operating System paloaltonetworks pan-os < 11.1.5 Yes
Operating System paloaltonetworks pan-os < 11.2.4 Yes
Operating System paloaltonetworks pan-os 10.1.14 Yes
Operating System paloaltonetworks pan-os 10.1.14 Yes
Operating System paloaltonetworks pan-os 10.1.14 Yes
Operating System paloaltonetworks pan-os 10.2.12 Yes
Operating System paloaltonetworks pan-os 10.2.12 Yes
Operating System paloaltonetworks pan-os 11.0.6 Yes
Operating System paloaltonetworks pan-os 11.1.5 Yes
Operating System paloaltonetworks pan-os 11.2.4 Yes
References