PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
CVSS score
6.9
EPSS probability
%94.8
Risk score
13.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: PAN-OS Management Web Interface - Command Injection
Palo Alto Networks PAN-OS(CVE-2024-9474) POC
Python script for CVE-2024-0012 / CVE-2024-9474 exploit
This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
Similar Vulnerabilities
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
Missing authentication in Paloaltonetworks Pan OS
PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities
Vulnerability in N/a Palo Alto Networks GlobalProtect Portal/Gateway Interface
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-9474"