CVE-2024-5911 PAN-OS: File Upload Vulnerability in the Panorama Web Interface

2024-07-1018:40:02

CWE-434

palo_alto

github.com

cve-2024-5911

file upload

palo alto networks panorama

web interface

authenticated

system processes

panorama maintenance

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/SC:N/VI:L/SI:N/VA:H/SA:N/AU:N/U:Amber/R:U/V:D/RE:M

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

CNA Affected

[
  {
    "vendor": "Palo Alto Networks",
    "product": "PAN-OS",
    "versions": [
      {
        "status": "unaffected",
        "version": "11.2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "10.2.4",
            "status": "unaffected"
          }
        ],
        "version": "10.2.0",
        "lessThan": "10.2.4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "10.1.9",
            "status": "unaffected"
          }
        ],
        "version": "10.1.0",
        "lessThan": "10.1.9",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "Panorama"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Cloud NGFW",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Prisma Access",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ],
    "defaultStatus": "unaffected"
  }
]