PT-2024-5657 · Palo Alto Networks · Palo Alto Networks Panorama

Yasukazu Miyashita · Published 2024-06-12 · Updated 2026-01-30 · CVE-2024-5911

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Panorama (affected versions not specified)

Description The issue is related to an arbitrary file upload vulnerability, allowing an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the system. Repeated attacks can cause the system to enter maintenance mode, requiring manual intervention to bring it back online. This can be achieved by uploading a specially crafted file, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2024-06370

CVE-2024-5911

Affected Products

Palo Alto Networks Panorama

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-5911 · Security Note
• https://security.paloaltonetworks.com/CVE-2024-5911 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-5911 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06370 · Security Note
• https://t.me/cveNotify/150464 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024071637 · Note
• https://vuldb.com/ru/?id.271096 · Note
• https://t.me/cvenotify/85718 · Telegram Post
• https://twitter.com/CVEnew/status/1811322710217429186 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1811093914046140856 · Twitter Post
• https://t.me/cvedetector/572 · Telegram Post