Palo Alto Multiple Vulnerabilities

Multiple vulnerabilities were discovered in Palo Alto products in the past, they may allow a remote attacker to execute arbitrary code or command and affect related systems. Please find the details in below table and take remediation immediately to affected systems.

Palo Alto Vulnerabilities in last 12 months:

Vulnerabilities	Publish Date
PAN-OS Denial of Service (DoS) vulnerability (CVE 2024-3393) ^[new]	27 Dec 2024
PAN-OS Authentication Bypass Vulnerability (CVE-2024-0012) & Privilege Escalation Vulnerability (CVE-2024-9474)	19 Nov 2024
OS Command Injection & SQL Injection vulnerabilities on Palo Alto Expedition (CVE 2024-9463 & CVE-2024-9465)	15 Nov 2024
PAN-OS Command Injection Vulnerability (CVE-2024-3400)	13 April 2024

Reference

Palo Alto Networks Security Advisories

Enquiry

For enquiries, please contact infosec@cuhk.edu.hk. Thanks a lot.

Published on: 12 Nov 2024

Last update on: 19 Nov 2024

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.