PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
CVSS Skor
9.3
EPSS İhtimal
%99.9
Risk Skoru
18.6
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE Reproduction: cve-2024-0012_9474-panos_authbypass_reproduction
Python script for CVE-2024-0012 / CVE-2024-9474 exploit
This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command execution.
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC
CVE-2024-0012是Palo Alto Networks PAN-OS软件中的一个身份验证绕过漏洞。该漏洞允许未经身份验证的攻击者通过网络访问管理Web界面，获取PAN-OS管理员权限，从而执行管理操作、篡改配置，或利用其他需要身份验证的特权提升漏洞（如CVE-2024-9474）
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC
watchtowrlabs/palo-alto-panos-cve-2024-0012
Nuclei: PAN-OS Management Web Interface - Authentication Bypass
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
İlgili Benzer Açıklar
Missing authentication in Paloaltonetworks Pan OS
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
Vulnerability in N/a Palo Alto Networks GlobalProtect Portal/Gateway Interface
Out-of-bounds write in Paloaltonetworks Pan OS
OS command injection in Paloaltonetworks Pan OS
PAN-OS: Authenticated Command Injection in CLI
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-0012"