cyber.hendryadrian.com

CVE

CVE-2024-0012

First Reported
Nov 22, 2024
Latest Reported
Jun 18, 2025
Articles
3
View articles →
IOC
11
View indicators →

CVE Enrichment

CVSS
9.3 CRITICAL
EPSS
99.86%
EPSS Percentile
99.96%
CISA KEV
YES — Known Exploited Vulnerability

Description

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Technical Details

CVSS Version
4.0
CNA / NVD Source
psirt@paloaltonetworks.com
Published
18-Nov-2024 23:15
Last Modified
04-Aug-2026 12:16
EPSS Date
2026-10-16
CWE
CWE-306

CVSS Vector

CVSS:4.0 AV:N / AC:L / AT:N / PR:N / UI:N / VC:H / VI:H / VA:H / SC:L / SI:N / SA:N / E:X / CR:X / IR:X / AR:X / MAV:X / MAC:X / MAT:X / MPR:X / MUI:X / MVC:X / MVI:X / MVA:X / MSC:X / MSI:X / MSA:X / S:X / AU:N / R:U / V:C / RE:H / U:Red

CISA KEV Details

Date Added
2024-11-18
Remediation Due
2024-12-09
Known Ransomware Campaign Use
Known
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.
Notes
https://security.paloaltonetworks.com/CVE-2024-0012 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0012

Affected Products / Versions

References

Last enrichment sync: 18-Oct-2026 03:55
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (3)

CVE (1)

CVE-2024-94743 related articles

Malware (6)

Sliver2 related articlesDaggerFly1 related articleMgBot1 related articlePHPWebshell1 related articleSpecter-C1 related articleXMRig Miner1 related article

Threat Actors (6)

0ktapus1 related articleAtlas Lion1 related articleBapak1 related articleCPU_HU1 related articleDaggerfly1 related articleDiicot1 related article

MITRE ATT&CK (8)

T11902 related articlesT14962 related articlesT1053.0031 related articleT10781 related articleT11051 related articleT1505.0031 related articleT1557.0041 related articleT15661 related article

Vendors (2)

Wiz3 related articlesPalo Alto Networks2 related articles

Products (7)

PAN-OS3 related articlesJenkins1 related articlePostgreSQL1 related articleRedis1 related articleSelenium Grid1 related articleWiz Cloud1 related articleWiz Defend1 related article

Tools (3)

Metasploit Framework1 related articleNuclei1 related articleSliver1 related article

Industries (2)

Enterprise1 related articleGovernment1 related article

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.