CVE-2024-5911CWE-434

PAN-OS: File Upload Vulnerability in the Panorama Web Interface

High · published July 10, 2024

CVSS v4.0
7.0
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00576 · 46.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2024-07-10T18:40Z
EPSS history
Timeline
  • 10 JUL 18:40Z
    PAN-OS: File Upload Vulnerability in the Panorama Web Interface
    cvelistv5