Description
Palo Alto Networks UI管理界面在PAN-OS 10.1.14-h6, PAN-OS 10.2.12-h2, PAN-OS11.0.6-h1, PAN-OS 11.1.5-h1, PAN-OS 11.2.4-h1版本以下存在命令注入漏洞，其UI管理界面存在未授权命令注入漏洞。
Palo Alto Networks UI管理界面存在命令注入漏洞（CVE-2024-9474）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.paloaltonetworks.com/CVE-2024-9474
https://nvd.nist.gov/vuln/detail/CVE-2024-9474
https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
https://avd.aliyun.com/detail?id=CVE-2024-9474
https://ddpoc.com/DVB-2025-9659.html
https://vulnerability.circl.lu/vuln/CVE-2024-9474
https://www.hackthebox.com/blog/cve-2024-9474-panos-command-injection
https://www.picussecurity.com/resource/blog/palo-alto-cve-2024-0012-and-cve-2024-9474-vulnerabilities-explained
https://www.helpnetsecurity.com/2024/11/18/cve-2024-0012-cve-2024-9474/