Exploited
high
7.2
CWE
78 77 94
EPSS
97.490%
Advisory Published
Advisory Published
CVE Published
Advisory Published
Updated

CVE-2024-9474: PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface (Severity: MEDIUM)

First published: Mon Nov 18 2024(Updated: )

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Credit: psirt@paloaltonetworks.com psirt@paloaltonetworks.com

Affected SoftwareAffected VersionHow to fix
Palo Alto PAN-OS
Palo Alto Networks PAN-OS>=10.1.0<10.1.14
Palo Alto Networks PAN-OS>=10.2.0<10.2.12
Palo Alto Networks PAN-OS>=11.0.0<11.0.6
Palo Alto Networks PAN-OS>=11.1.0<11.1.5
Palo Alto Networks PAN-OS>=11.2.0<11.2.4
Palo Alto Networks PAN-OS=10.1.14
Palo Alto Networks PAN-OS=10.1.14-h2
Palo Alto Networks PAN-OS=10.1.14-h4
Palo Alto Networks PAN-OS=10.2.12
Palo Alto Networks PAN-OS=10.2.12-h1
Palo Alto Networks PAN-OS=11.0.6
Palo Alto Networks PAN-OS=11.1.5
Palo Alto Networks PAN-OS=11.2.4
Palo Alto Networks Cloud NGFW
Palo Alto PAN-OS<11.2.4-h1=11.2.0<11.1.5-h1=11.1.0<11.0.6-h1=11.0.0<10.2.12-h2=10.2.0<10.1.14-h6=10.1.0
11.2.4-h1
11.2.0-h1
11.2.1-h1
11.2.2-h2
11.2.3-h3
11.1.5-h1
11.1.0-h4
11.1.1-h2
11.1.2-h15
11.1.3-h11
11.1.4-h7
11.0.6-h1
11.0.0-h4
11.0.5-h2
11.0.4-h6
11.0.3-h13
11.0.2-h5
11.0.1-h5
10.2.12-h2
10.2.0-h4
10.2.11-h6
10.2.10-h9
10.2.9-h16
10.2.8-h15
10.2.7-h18
10.2.6-h6
10.2.5-h9
10.2.4-h32
10.2.3-h14
10.2.2-h6
10.2.1-h3
10.1.14-h6
10.1.3-h4
10.1.13-h5
10.1.12-h3
10.1.11-h10
10.1.10-h9
10.1.9-h14
10.1.8-h8
10.1.6-h9
Prisma

Remedy

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.

Remedy

Recommended mitigation—The vast majority of firewalls already follow Palo Alto Networks and industry best practices. However, if you haven’t already, we strongly recommend that you secure access to your management interface according to our best practice deployment guidelines. Specifically, you should restrict access to the management interface to only trusted internal IP addresses to prevent external access from the internet. Review information about how to secure management access to your Palo Alto Networks firewalls: * Palo Alto Networks LIVEcommunity article: https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 * Palo Alto Networks official and more detailed technical documentation: https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices

Remedy

This issue is fixed in PAN-OS 10.1.14-h6, PAN-OS 10.2.12-h2, PAN-OS 11.0.6-h1, PAN-OS 11.1.5-h1, PAN-OS 11.2.4-h1, and all later PAN-OS versions. In addition, in an attempt to provide the most seamless upgrade path for our customers, we are making fixes available for other TAC-preferred and commonly deployed maintenance releases. * Additional PAN-OS 11.2 fixes: * 11.2.0-h1 * 11.2.1-h1 * 11.2.2-h2 * 11.2.3-h3 * 11.2.4-h1 * Additional PAN-OS 11.1 fixes: * 11.1.0-h4 * 11.1.1-h2 * 11.1.2-h15 * 11.1.3-h11 * 11.1.4-h7 * 11.1.5-h1 * Additional PAN-OS 11.0 fixes: * 11.0.0-h4 * 11.0.1-h5 * 11.0.2-h5 * 11.0.3-h13 * 11.0.4-h6 * 11.0.5-h2 * 11.0.6-h1 * Additional PAN-OS 10.2 fixes: * 10.2.0-h4 * 10.2.1-h3 * 10.2.2-h6 * 10.2.3-h14 * 10.2.4-h32 * 10.2.5-h9 * 10.2.6-h6 * 10.2.7-h18 * 10.2.8-h15 * 10.2.9-h16 * 10.2.10-h9 * 10.2.11-h6 * 10.2.12-h2 * Additional PAN-OS 10.1 fixes: * 10.1.3-h4 * 10.1.6-h9 * 10.1.8-h8 * 10.1.9-h14 * 10.1.10-h9 * 10.1.11-h10 * 10.1.12-h3 * 10.1.13-h5 * 10.1.14-h6

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

  • What is the severity of CVE-2024-9474?

    CVE-2024-9474 is classified as a privilege escalation vulnerability in Palo Alto Networks PAN-OS software.

  • How can I fix CVE-2024-9474?

    To remediate CVE-2024-9474, update your PAN-OS to a version that is not affected, such as 11.2.4-h1 or later.

  • Who is affected by CVE-2024-9474?

    CVE-2024-9474 affects administrators who access the management web interface of Palo Alto Networks PAN-OS.

  • Does CVE-2024-9474 impact Cloud NGFW or Prisma Access?

    No, CVE-2024-9474 does not impact Palo Alto Networks Cloud NGFW or Prisma Access.

  • What actions can be performed with the exploit of CVE-2024-9474?

    Exploiting CVE-2024-9474 allows a PAN-OS administrator to perform actions on the firewall with root privileges.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203