6.9 Medium Exploited · ransomware

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.

Ransomware campaigns Known to be used

Weakness CWE-77

Description

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
Cloud NGFW	Versions not published
PAN-OS 11.2	11.2.0 → < 11.2.4-h1	11.2.4-h1
PAN-OS 11.1	11.1.0 → < 11.1.5-h1	11.1.5-h1
PAN-OS 11.0	11.0.0 → < 11.0.6-h1	11.0.6-h1
PAN-OS 10.2	10.2.0 → < 10.2.12-h2	10.2.12-h2
PAN-OS 10.1	10.1.0 → < 10.1.14-h6	10.1.14-h6
Prisma Access	Versions not published
pan-os 11.2	11.2.0 → < 11.2.4-h1	11.2.4-h1
pan-os 11.1	11.1.0 → < 11.1.5-h1	11.1.5-h1

Show the 3 other branches

Product	Affected versions	Fixed in
pan-os 11.0	11.0.0 → < 11.0.6-h1	11.0.6-h1
pan-os 10.2	10.2.0 → < 10.2.12-h2	10.2.12-h2
pan-os 10.1	10.1.0 → < 10.1.14-h6	10.1.14-h6

References

security.paloaltonetworks.com security.paloaltonetworks.com

Timeline

Published November 18, 2024
Added to the KEV catalogue November 18, 2024
Last modified August 4, 2026

The 114 CVEs of Cloud NGFW →

CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Low CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Low CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Medium CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Medium

Track this CVE