NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Palo Alto PAN-OS
view advisory published 2024-11-14
Palo Alto Networks heeft kwetsbaarheden verholpen in PAN-OS.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-9472US | — | — | ||
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when Decryption policy is e… | ||||
| CVE-2024-5920US | medium4.8 | — | ||
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuratio… | ||||
| CVE-2024-5919US | medium6.5 | — | ||
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls… | ||||
| CVE-2024-5918US | medium4.3 | — | ||
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impac… | ||||
| CVE-2024-5917US | medium4.9 | — | ||
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables… | ||||
| CVE-2024-2552US | medium6.0 | — | ||
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete file… | ||||
| CVE-2024-2551US | high7.5 | — | ||
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafte… | ||||
| CVE-2024-2550US | high7.5 | — | ||
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan