CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2024-9474

🔥 Known Exploited (CISA KEV)MEDIUM
6.9
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-11-18
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Affected Platforms (CPE)

💻
Paloaltonetworks

Pan Os

>= 10.1.0 and < 10.1.14>= 10.2.0 and < 10.2.12>= 11.0.0 and < 11.0.6>= 11.1.0 and < 11.1.5>= 11.2.0 and < 11.2.4= 10.1.14= 10.2.12= 11.0.6= 11.1.5= 11.2.4

References & Advisories

🔗 https://security.paloaltonetworks.com/CVE-2024-9474
🔗 https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
🔗 https://github.com/k4nfr3/CVE-2024-9474
🔗 https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9474

相關資安分析文章

週度網絡安全新聞：2026 年 7 月 27 日

本週重大安全週報聚焦於 Check Point SmartConsole CVE-2026-16232 驗證繞過之在野利用、PAN-OS GlobalProtect 漏洞與 Qilin 勒索軟體侵襲、俄羅斯 LAUNDRY BEAR 對 Zimbra 進行之國家級郵件間諜活動，以及 Windchill 與 FakeGit 惡意 Repositories 威脅趨勢。

2026-07-27

全球網絡威脅情報摘要：2026 年 7 月 22 日

本期摘要重點分析本地部署 Microsoft SharePoint 伺服器正遭主動利用之 CVE-2026-50522 漏洞、Qilin 勒索軟體利用 PAN-OS CVE-2026-0257 身分驗證繞過入侵企業 VPN，以及 Cisco 安全設備與關鍵基礎設施修補處置指南。

2026-07-22

相關漏洞威脅

CVE-2026-643787.8

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroup_writeback_umount() and ino...

CVE-2026-638137.8

In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache i...

CVE-2026-02877.5

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network a...

CVE-2026-02867.2

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administ...