CVE-2024-0012 - Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Vulnerability Name

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.

Additional Notes

https://security.paloaltonetworks.com/CVE-2024-0012

https://nvd.nist.gov/vuln/detail/CVE-2024-0012

Related News Articles

Attackers are chaining flaws to breach Palo Alto Networks firewallsFebruary 19, 2025

Chinese APT 'Emperor Dragonfly' Moonlights With RansomwareFebruary 14, 2025

Chinese espionage tools deployed in RA World ransomware attackFebruary 13, 2025

RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetFebruary 13, 2025

Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackersJanuary 8, 2025