PT-2024-7513 · Palo Alto Networks · Pan-Os

Jeff Luo · Published 2024-10-03 · Updated 2025-05-01 · CVE-2024-9468

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description A memory corruption issue in PAN-OS software allows an unauthenticated attacker to crash the system due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode. The vulnerability is actively exploited in the wild.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-08908

CVE-2024-9468

Affected Products

Pan-Os

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2024-9468 · Security Note
• https://security.paloaltonetworks.com/CVE-2024-9468 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08908 · Security Note
• https://osv.dev/vulnerability/CVE-2024-9468 · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1917884040725594530 · Twitter Post
• https://twitter.com/fletch_ai/status/1844286888930312252 · Twitter Post
• https://vuldb.com/ru/?id.279893 · Note
• https://twitter.com/Patrowl_io/status/1846893137513390219 · Twitter Post
• https://twitter.com/RedPacketSec/status/1917884041988046983 · Twitter Post
• https://t.me/cvedetector/7509 · Telegram Post
• https://twitter.com/CVEnew/status/1844064008829071708 · Twitter Post
• https://twitter.com/RedPacketSec/status/1917884043229565213 · Twitter Post
• https://twitter.com/RedPacketSec/status/1917884044517179445 · Twitter Post
• https://twitter.com/kawn2020/status/1846711492038873534 · Twitter Post
• https://twitter.com/Brandefense/status/1845864141426225674 · Twitter Post