CVE

CVE-2024-0012

P1⬤ KNOWN RANSOMWARE USE

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS

Date added (CISA)

2024-11-18

Remediation due

2024-12-09

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.

Source: NVD ↗ · CISA KEV Catalog ↗