exploit/linux/http/panos_management_unauth_rce

weaponized

Palo Alto Networks PAN-OS Management Interface Unauthenticated Remote Code Execution

view exploit source metasploittype exploitpublished 2024-11-18catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-9474US	high7.2OT critical	94.8% (100th)	KEV	2024-11-18
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firew…
CVE-2024-0012US	critical9.8OT critical	99.9% (100th)	KEV	2024-11-18
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.