CVE-2024-5911

MEDIUM

Paloaltonetworks Pan-os < 10.1.9 - Unrestricted File Upload

Title source: rule

Description

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://security.paloaltonetworks.com/CVE-2024-5911

Scores

CVSS v3 4.9

EPSS 0.0042

EPSS Percentile 61.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-434

Status published

Products (1)

paloaltonetworks/pan-os 10.1.0 - 10.1.9

Published Jul 10, 2024

Tracked Since Feb 18, 2026