CVE-2024-9474
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Published Nov 18, 2024 · updated Aug 3, 2026 · paloaltonetworks pan-os
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Timeline
Detection, updates, and resolution for this record.
Nov 18, 2024 · Catalog
Detected
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Nov 18, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.
Dec 9, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.
Aug 3, 2026 · Catalog
Updated
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.
CISA due date Dec 9, 2024
Affected
- cpe paloaltonetworks/pan-osversion unspecified
- cpe paloaltonetworks/pan-os10.1.14
- vendor Palo Alto Networks PAN-OSversion unspecified
Sources
- CISA KEVCVE-2024-9474
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
cisa.gov - CVE.orgCVE-2024-9474
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-9474
30-day exploitation probability 94.8%
first.org - Metasploit Modulesexploit_linux/http/panos_management_unauth_rce
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2024-9474
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
nvd.nist.gov