CVE-2024-0012
CRITICALCVSS v3
9.8
CRITICAL
EPSS Score
94.3%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Technical Details
- Published
- 11/18/2024
Frequently Asked Questions
What is CVE-2024-0012?
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
Is CVE-2024-0012 actively exploited?
Active exploitation of CVE-2024-0012 has not been confirmed. The EPSS score is 94.3%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2024-0012?
CVE-2024-0012 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2024-0012 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.