Metraipolis › archive › dc_e7572a930bae

KEV CVE-2024-9474: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Source: CISA KEV
Original: https://nvd.nist.gov/vuln/detail/CVE-2024-9474
License (as archived): CC0-1.0
Archived: 2026-10-24T15:22:53.320Z
SHA-256 of the archived text: 729d0d93566f0668c796fd3f61a84ebef847ad47546402b17498da644461ab36
Stable URL of this page: https://metraipolis.com/documento/dc_e7572a930bae

How to cite

KEV CVE-2024-9474: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability — CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-9474 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_e7572a930bae (Metraipolis archive dc_e7572a930bae, sha256 729d0d93566f0668c796fd3f61a84ebef847ad47546402b17498da644461ab36)

BibTeX

@misc{dce7572a930bae,
  title = {KEV CVE-2024-9474: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability},
  howpublished = {CISA KEV},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2024-9474},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_e7572a930bae; sha256 729d0d93566f0668c796fd3f61a84ebef847ad47546402b17498da644461ab36},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-9474. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

CVE-2024-9474 è nel catalogo CISA delle vulnerabilità SFRUTTATE attivamente (Known Exploited Vulnerabilities), aggiunta il 2024-11-18.
Prodotto: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Descrizione: Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
Azione richiesta (agenzie federali USA): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet. Scadenza: 2024-12-09.
Uso noto in campagne ransomware: Known
Debolezze: CWE-77
Note e riferimenti: https://security.paloaltonetworks.com/CVE-2024-9474 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9474

Fonte: catalogo CISA KEV (CC0 1.0), versione 2026.10.23, consultato il 2026-10-24: https://www.cisa.gov/known-exploited-vulnerabilities-catalog