Sploitus

CVE-2024-9474

23 known exploits for CVE-2024-9474

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Affected products
Pan-Os
Paloaltonetworks Pan-os
< 10.1.14, 10.2.12, 11.0.6, 11.1.5, 11.2.4
Fix
Available
CVSS 3.1
7.2 HIGH
EPSS
94.7% (100th percentile)
Weakness
CWE-78
NVD status
Analyzed
Published
2024-11-18
Attack patterns
CAPEC-88

Workaround

Recommended mitigation—The vast majority of firewalls already follow Palo Alto Networks and industry best practices. However, if you haven’t already, we strongly recommend that you secure access to your management interface according to our best practice deployment guidelines. Specifically, you should restrict access to the management interface to only trusted internal IP addresses to prevent external access from the internet. Review information about how to secure management access to your Palo Alto Networks firewalls: * Palo Alto Networks LIVEcommunity article:  https://docs.paloaltonetworks.com/best-practices/10-1/administrative-access-best-practices/administrative-access-best-practices/deploy-administrative-access-best-practices

CVE-2024-9474 at NVD
Authoritative description, scoring and affected products

23 known exploits for CVE-2024-9474

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2024-9474
2026-08-27 KitPloitKITPLOIT
cve-2024-0012-gui-poc
2026-08-27 KitPloitKITPLOIT
CVE-2024-0012_CVE-2024-9474_PoC
2026-08-27 KitPloitKITPLOIT
PanOsExploitMultitool
2026-08-27 KitPloitKITPLOIT
cve-2024-0012_9474-panos_authbypass_reproduction
2026-08-27 KitPloitKITPLOIT
palo-alto-panos-cve-2024-0012
2026-08-26 KitPloitKITPLOIT
CVE-2024-9474
2026-08-26 KitPloitKITPLOIT
CVE-2024-9474
2026-08-26 KitPloitKITPLOIT
PAN-OS_CVE-2024-9474
2026-08-26 KitPloitKITPLOIT
cve-2024-0012-poc
2026-08-21 KitPloitKITPLOIT
📄 Palo Alto Networks PAN-OS 11.2 PHP Code Injection
2026-02-10 indoushkaPACKETSTORMPHP
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2025-05-21 Regent8SHGITHUB
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2025-02-06 dcollaoaGITHUB
Exploit for OS Command Injection in Paloaltonetworks Pan-Os
2025-01-16 arataneGITHUB
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2024-12-11 TalatumLabsGITHUB
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2024-11-22 XiaomingXGITHUB
PAN-OS management interface authentication bypass
2024-11-20 SAINT CorporationSAINT
PAN-OS management interface authentication bypass
2024-11-20 SAINT CorporationSAINT
Exploit for OS Command Injection in Paloaltonetworks Pan-Os
2024-11-20 deathvuGITHUB
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2024-11-19 watchtowrlabsGITHUB
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
2024-11-19 SachinartGITHUB
Exploit for OS Command Injection in Paloaltonetworks Pan-Os
2024-11-19 ChocapikkGITHUB
Palo Alto Networks PAN-OS Management Interface Unauthenticated Remote Code Execution
2024-11-18 watchTowr, sfewer-r7METASPLOITRuby