Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2024-0012

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.

Recommended action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.

CISA remediation due date for U.S. federal agencies: 9 Dec 2024.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.