ID:10950 - Exploit for Improper authentication in Palo Alto PAN-OS - CVE-2024-0012

 
Main Vulnerability Database Exploits ID:10950 - Exploit for Improper authentication in Palo Alto PAN-OS - CVE-2024-0012

ID:10950 - Exploit for Improper authentication in Palo Alto PAN-OS - CVE-2024-0012

Published: December 6, 2024


Vulnerability identifier: #VU100596
Vulnerability risk: Critical
CVE-ID: CVE-2024-0012
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
Palo Alto PAN-OS

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper authentication in the Management Web Interface. A remote non-authenticated attacker can bypass authentication process and gain unauthorized access to the system.

Note, the vulnerability is being actively exploited in the wild in conjunction with #VU100528 (CVE-2024-9474).


Remediation

Install updates from vendor's website.