CVE-2024-5913 | THREATINT

Assigner	palo_alto
Reserved	2024-06-12
Published	2024-07-10
Updated	2024-08-06

Description

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.

MEDIUM: 6.1

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-20 Improper Input Validation

Product status

Default status

unaffected

10.1.0 before 10.1.14-h2

affected

10.2.0 before 10.2.10

affected

11.0.0 before 11.0.5

affected

11.1.0 before 11.1.4

affected

11.2.0 before 11.2.1

affected

Default status

unaffected

None

affected

All

unaffected

Default status

unaffected

None

affected

All

unaffected

Timeline

2024-07-10:

Initial publication

Credits

Independent Security Researcher Pear1y 0x4002fe22c0

Joel Land of CISA Vulnerability Response and Coordination 0x4002fe22d0

rqu 0x4002fe22e0

Enrique Castillo of Palo Alto Networks 0x4002fe22f0

References

https://security.paloaltonetworks.com/CVE-2024-5913

cve.org CVE-2024-5913

nvd.nist.gov CVE-2024-5913

Download JSON