Unrated severityNVD Advisory· Published Nov 14, 2024· Updated Nov 14, 2024

PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)

CVE-2024-2552

Description

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.

Affected products

Paloaltonetworks/Pan Osv52 versions
cpe:2.3:o:paloaltonetworks:pan-os:11.2.3:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:paloaltonetworks:pan-os:11.2.3:-:*:*:*:*:*:*range: 11.2.0
- (no CPE)
Paloaltonetworks/Cloud NGFWcpe-rescue
Range: All
Paloaltonetworks/Prisma Access Agentcpe-rescue
Range: All

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security.paloaltonetworks.com/CVE-2024-2552mitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000