Back to the CVE list
CVE-2024-0012 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)

CVSS score

9.3

EPSS probability

%99.9

Risk score

18.6

Published

1 y ago

OverviewPublic Exploits (11)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

N
projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0012.yaml
Nuclei

Nuclei: PAN-OS Management Web Interface - Authentication Bypass

Exploit reference
G
0xjessie21/CVE-2024-0012
GitHub

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

Public PoC
G
dcollaoa/cve-2024-0012-gui-poc
GitHub

Python script for CVE-2024-0012 / CVE-2024-9474 exploit

Public PoC
G
Gr-1m/cve-2024-0012-poc
GitHub

CVE-2024-0012是Palo Alto Networks PAN-OS软件中的一个身份验证绕过漏洞。该漏洞允许未经身份验证的攻击者通过网络访问管理Web界面，获取PAN-OS管理员权限，从而执行管理操作、篡改配置，或利用其他需要身份验证的特权提升漏洞（如CVE-2024-9474）

Public PoC
G
greaselovely/CVE-2024-0012
GitHub

PANW NGFW CVE-2024-0012

Public PoC
G
iSee857/CVE-2024-0012-poc
GitHub

CVE-2024-0012批量检测脚本

Public PoC
G
razureink/cve-2024-0012_9474-panos_authbypass_reproduction
GitHub

CVE Reproduction: cve-2024-0012_9474-panos_authbypass_reproduction

Public PoC
G
Sachinart/CVE-2024-0012-POC
GitHub

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

Public PoC
G
TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC
GitHub

This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.

Public PoC
G
watchtowrlabs/palo-alto-panos-cve-2024-0012
GitHub

watchtowrlabs/palo-alto-panos-cve-2024-0012

Public PoC
N
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
NVD reference

https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-0012"