Exploit for #VU100528 OS Command Injection in Palo Alto PAN-OS

Vulnerability identifier: #VU100528

Vulnerability risk: High

CVSSv4.0: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2024-9474

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 8

• March 25, 2025
  • CVE-2024-9474 [Github]
• February 7, 2025
  • cve-2024-0012-gui-poc (Python script for CVE-2024-0012 / CVE-2024-9474 exploit) [Github]
• December 30, 2024
  • Palo Alto Networks PAN-OS Management Interface Unauthenticated Remote Code Execution [Metasploit]
• December 19, 2024
  • PAN-OS_CVE-2024-9474 [Github]
• December 13, 2024
  • CVE-2024-0012_CVE-2024-9474_PoC (This PoC is targeting vulnerabilities in Palo Alto PAN-OS, specifically CVE-2024-0012 and CVE-2024-9474. This script automates the exploitation process, including payload creation, chunked delivery, and seamless command e [Github]
• November 22, 2024
  • CVE-2024-9474 [Github]
  • CVE-2024-9474 [Github]
  • CVE-2024-9474 (PoC for PAN-OS Exploit) [Github]

Vulnerable software:
Palo Alto PAN-OS
Operating systems & Components / Operating system

Vendor: Palo Alto Networks, Inc.