Main
Vulnerability Database
Exploits
ID:11637 - Exploit for OS Command Injection in Palo Alto PAN-OS - CVE-2024-9474
ID:11637 - Exploit for OS Command Injection in Palo Alto PAN-OS - CVE-2024-9474
Published: June 13, 2025
Vulnerability identifier: #VU100528
Vulnerability risk: High
CVE-ID: CVE-2024-9474
CWE-ID: CWE-78
Exploitation vector: Remote access
Vulnerable software:
Palo Alto PAN-OS
Palo Alto PAN-OS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote user to execute arbitrary shell commands on the target system.
The vulnerability exists due to an unspecified vulnerability related to improper input validation within the management interface. A remote user can send a specially crafted request to the system and execute arbitrary OS commands.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.