CVE-2024-0012 and CVE-2024-9474

Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) and Authenticated Command Injection in Palo Alto PAN-OS

See our blog post for technical details

Affected Versions

TBD

Exploit authors

This exploit was written by Sonny of watchTowr (@watchtowrcyber)

Follow watchTowr Labs

For the latest security research follow the watchTowr Labs Team

• https://labs.watchtowr.com/
• https://x.com/watchtowrcyber