Back to search
CVE-2024-9474
Published: Nov 18, 2024
Modified: Oct 21, 2025
PUBLISHED
Description
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
Palo Alto Networks | Cloud NGFW | unaffected All |
Palo Alto Networks | PAN-OS | affected 11.2.0 - < 11.2.4-h1affected 11.1.0 - < 11.1.5-h1affected 11.0.0 - < 11.0.6-h1affected 10.2.0 - < 10.2.12-h2affected 10.1.0 - < 10.1.14-h6 |
Palo Alto Networks | Prisma Access | unaffected All |
Weaknesses (CWE)
References
https://security.paloaltonetworks.com/CVE-2024-9474
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now