CVE-2024-5911

2024-07-1019:15:11

CWE-434

palo_alto

web.nvd.nist.gov

1087

arbitrary file upload

palo alto networks

panorama software

authenticated read-write administrator

web interface

system processes

maintenance mode

manual intervention

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/SC:N/VI:L/SI:N/VA:H/SA:N/AU:N/U:Amber/R:U/V:D/RE:M

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.3%

JSON

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

Affected configurations

Vulners

Node

paloaltonetworkspan-osRange10.2.0–10.2.4

Node

paloaltonetworkspan-osRange10.1.0–10.1.9

VendorProductVersionCPE
paloaltonetworkspan-os*cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
paloaltonetworks	pan-os	*	cpe:2.3:o:paloaltonetworks:pan-os::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Panorama"
    ],
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "11.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.2.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.2.4",
        "status": "affected",
        "version": "10.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.1.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.1.9",
        "status": "affected",
        "version": "10.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  }
]