CVE-2024-5913
PAN-OS: Improper Input Validation Vulnerability in PAN-OS
Severity
Medium 6.1
CVSS 3.1
Exploited
Not listed
EPSS
0.002
13.9th percentile
Discovered by
Third party
Published by the vendor
Published
Jul 10, 2024
Assigned by palo_alto
Description
An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.
Weakness: CWE-20
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | Cloud NGFW | Firewall / NGFW | cna-assigner |
| Palo Alto Networks | PAN-OS | Firewall / NGFW | cna-assigner |
| Palo Alto Networks | Prisma Access | SASE / SSE / Secure Web | cna-assigner |
Vendor-reported affected versions (8)
- Palo Alto Networks · PAN-OS
- Palo Alto Networks · Cloud NGFW
- Palo Alto Networks · Prisma Access
- paloaltonetworks · pan-os
- paloaltonetworks · pan-os
- paloaltonetworks · pan-os
- paloaltonetworks · pan-os
- paloaltonetworks · pan-os
Credit
Independent Security Researcher Pear1y
Vendor remediation
This issue is fixed in PAN-OS 10.1.14-h2, PAN-OS 10.2.10, PAN-OS 11.0.5, PAN-OS 11.1.4, PAN-OS 11.2.1, and all later PAN-OS versions.