SB2024031408 - Denial of service in Palo Alto PAN-OS
Published: March 14, 2024
Security Bulletin ID
SB2024031408
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Privilege Management (CVE-ID: CVE-2024-2433)
The vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper privilege management within the web interface. A remote authenticated read-only administrator can upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images.
Remediation
Install update from vendor's website.