CVE-2024-9474

🗓️ 18 Nov 2024 15:48:23Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 18 Media mentions👁 424 Views🌐 WEB

Privilege escalation vulnerability in Palo Alto Networks PAN-OS softwar

Reporter	Title	Published	Views	Family All 60
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	11 Dec 202418:13	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Pan-Os	19 Nov 202417:26	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	21 May 202503:59	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Pan-Os	16 Jan 202520:07	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Pan-Os	20 Nov 202422:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	22 Nov 202414:11	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	19 Nov 202408:29	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	6 Feb 202520:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os	19 Nov 202411:30	–	githubexploit
ATTACKERKB	CVE-2024-9474	18 Nov 202400:00	–	attackerkb

NVD

Vulners

Vulnrichment

Node

paloaltonetworks pan-osRange10.1.0–10.1.14

paloaltonetworks pan-osRange10.2.0–10.2.12

paloaltonetworks pan-osRange11.0.0–11.0.6

paloaltonetworks pan-osRange11.1.0–11.1.5

paloaltonetworks pan-osRange11.2.0–11.2.4

paloaltonetworks pan-osMatch10.1.14-

paloaltonetworks pan-osMatch10.1.14h2

paloaltonetworks pan-osMatch10.1.14h4

paloaltonetworks pan-osMatch10.2.12-

paloaltonetworks pan-osMatch10.2.12h1

paloaltonetworks pan-osMatch11.0.6-

paloaltonetworks pan-osMatch11.1.5-

paloaltonetworks pan-osMatch11.2.4-

[
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "11.2.4-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.2.4-h1",
        "status": "affected",
        "version": "11.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.1.5-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.1.5-h1",
        "status": "affected",
        "version": "11.1.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.0.6-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.0.6-h1",
        "status": "affected",
        "version": "11.0.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.2.12-h2",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.2.12-h2",
        "status": "affected",
        "version": "10.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.1.14-h6",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.1.14-h6",
        "status": "affected",
        "version": "10.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-9474
labs	www.labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
github	www.github.com/k4nfr3/CVE-2024-9474
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
unit42	www.unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/

Parameter	Position	Path	Description	CWE
user	request body	php/utils/createRemoteAppwebSession.php	Authentication bypass and command injection via crafted session creation endpoint used to trigger remote code execution.	CWE-78
userRole	request body	php/utils/createRemoteAppwebSession.php	Authentication bypass and command injection via crafted session creation endpoint used to trigger remote code execution.	CWE-78
remoteHost	request body	php/utils/createRemoteAppwebSession.php	Authentication bypass and command injection via crafted session creation endpoint used to trigger remote code execution.	CWE-78
vsys	request body	php/utils/createRemoteAppwebSession.php	Authentication bypass and command injection via crafted session creation endpoint used to trigger remote code execution.	CWE-78

04 Aug 2026 05:16Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.2

CVSS 46.9

EPSS0.94766

SSVC