CVE-2024-9474
PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
KEV RANSOMWAREMEDIUM 6.9EPSS 94.8%
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.Cloud NGFW and Prisma Access are not impacted by this vulnerability.
- Affected
- Palo Alto Networks · Cloud NGFW · PAN-OS · Prisma Access
- CVSS v4.0 PALOALTONETWORKS
- 6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Red - CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- 94.82% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2024-11-18, used in ransomware campaigns
- Nuclei
- high · CWE-78
- Published
- 2024-11-18
- Updated
- 2026-08-04
Proof-of-concept exploits (11)
- https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and…
- Chocapikk/CVE-2024-947445★ · 2024-11-19
- Regent8SH/PanOsExploitMultitool6★ · 2026-06-05
- Sachinart/CVE-2024-0012-POC20★ · 2024-11-19
- TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC8★ · 2024-12-12
- aratane/CVE-2024-94741★ · 2025-01-16
- coskper-papa/PAN-OS_CVE-2024-94742★ · 2024-12-11
- dcollaoa/cve-2024-0012-gui-poc3★ · 2025-04-22
- deathvu/CVE-2024-94740★ · 2024-11-20
- k4nfr3/CVE-2024-947410★ · 2024-11-22
- razureink/cve-2024-0012_9474-panos_authbypass_reproduction0★ · 2026-07-23
Nuclei templates (1)
Metasploit modules (1)
Security advisories
- https://security.paloaltonetworks.com/CVE-2024-9474
- https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474
- https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and…