CVE-2024-5913 | THREATINT

Assigner	palo_alto
Reserved	2024-06-12
Published	2024-07-10
Updated	2024-08-06

Description

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.

MEDIUM: 6.1

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Product status

Default status

unaffected

10.1.0 before 10.1.14-h2

affected

10.2.0 before 10.2.10

affected

11.0.0 before 11.0.5

affected

11.1.0 before 11.1.4

affected

11.2.0 before 11.2.1

affected

Default status

unaffected

None

affected

All

unaffected

Default status

unaffected

None

affected

All

unaffected

Timeline

2024-07-10:

Initial publication

Credits

Independent Security Researcher Pear1y finder

Joel Land of CISA Vulnerability Response and Coordination finder

rqu finder

Enrique Castillo of Palo Alto Networks finder

References

https://security.paloaltonetworks.com/CVE-2024-5913

cve.org CVE-2024-5913

nvd.nist.gov CVE-2024-5913

Download JSON

https://cve.threatint.com/CVE/CVE-2024-5913

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.