High Threat Security Alert (A24-11-12): Multiple Vulnerabilities in Palo Alto Products

Description:

Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS. The detailed information about the vulnerabilities can be found at:
https://security.paloaltonetworks.com/CVE-2024-2550
https://security.paloaltonetworks.com/CVE-2024-2551
https://security.paloaltonetworks.com/CVE-2024-2552
https://security.paloaltonetworks.com/CVE-2024-5917
https://security.paloaltonetworks.com/CVE-2024-5918
https://security.paloaltonetworks.com/CVE-2024-5919
https://security.paloaltonetworks.com/CVE-2024-5920
https://security.paloaltonetworks.com/CVE-2024-9472
https://security.paloaltonetworks.com/PAN-SA-2024-0015

Reports indicated that the unauthenticated remote code execution vulnerability (tracked as PAN-SA-2024-0015 without CVE identifier assigned yet) affecting PAN-OS firewalls against a limited number of management interfaces is being exploited in the wild. System administrators are advised to take immediate actions as recommended by the vendor to mitigate the elevated risk of cyber attacks.

Affected Systems:

• PAN-OS 10.1 versions prior to 10.1.14
• PAN-OS 10.2 versions prior to 10.2.12
• PAN-OS 11.0 versions prior to 11.0.6
• PAN-OS 11.1 versions prior to 11.1.5
• PAN-OS 11.2 versions prior to 11.2.4

For detailed information of the affected systems or management interfaces that require remediation action, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, information disclosure, security restriction bypass or spoofing on an affected system.

Recommendation:

Patches for affected systems are now available. For detailed information of the available patches, please refer to the section "Solution" of corresponding security advisory at vendor's website.

System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://security.paloaltonetworks.com/CVE-2024-2550
• https://security.paloaltonetworks.com/CVE-2024-2551
• https://security.paloaltonetworks.com/CVE-2024-2552
• https://security.paloaltonetworks.com/CVE-2024-5917
• https://security.paloaltonetworks.com/CVE-2024-5918
• https://security.paloaltonetworks.com/CVE-2024-5919
• https://security.paloaltonetworks.com/CVE-2024-5920
• https://security.paloaltonetworks.com/CVE-2024-9472
• https://security.paloaltonetworks.com/PAN-SA-2024-0015
• https://www.hkcert.org/security-bulletin/palo-alto-pan-os-multiple-vulnerabilities_20241115
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2550 (to CVE-2024-2552)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5917 (to CVE-2024-5920)
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9472