The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.0-h4 or 10.2.x prior to 10.2.1-h3 or 10.2.x prior to 10.2.2-h6 or 10.2.x prior to 10.2.3-h14 or 10.2.x prior to 10.2.4-h32 or 10.2.x prior to 10.2.5-h9 or 10.2.x prior to 10.2.6-h6 or 10.2.x prior to 10.2.7-h18 or 10.2.x prior to 10.2.8-h15 or 10.2.x prior to 10.2.9-h16 or 10.2.x prior to 10.2.10-h9 or 10.2.x prior to 10.2.11-h6 or 10.2.x prior to 10.2.12-h2 or 11.0.x prior to 11.0.0-h4 or 11.0.x prior to 11.0.1-h5 or 11.0.x prior to 11.0.2-h5 or 11.0.x prior to 11.0.3-h13 or 11.0.x prior to 11.0.4-h6 or 11.0.x prior to 11.0.5-h2 or 11.0.x prior to 11.0.6-h1 or 11.1.x prior to 11.1.0-h4 or 11.1.x prior to 11.1.1-h2 or 11.1.x prior to 11.1.2-h15 or 11.1.x prior to 11.1.3-h11 or 11.1.x prior to 11.1.4-h7 or 11.1.x prior to 11.1.5-h1 or 11.2.x prior to 11.2.1-h1 or 11.2.x prior to 11.2.2-h2 or 11.2.x prior to 11.2.3-h3 or 11.2.x prior to 11.2.4-h1. It is, therefore, affected by multiple vulnerabilities.

    An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with     network access to the management web interface to gain PAN-OS administrator privileges to perform     administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation     vulnerabilities like [CVE-2024-9474](https://security.paloaltonetworks.com/CVE-2024-9474).

    The risk of this issue is greatly reduced if you secure access to the management web interface by     restricting access to only trusted internal IP addresses according to our recommended[best practice     deployment guidelines](https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-     the-management-access-of-your-palo/ba-p/464431).

    This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software on PA-     Series, VM-Series, and CN-Series firewalls and on Panorama (virtual and M-Series).

    Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Tenable has extracted the preceding description block directly from the PAN-OS security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

medium Nessus Plugin ID 211512

Version 1.3