{"id":"CVE-2024-9474","aliases":[],"url":"https://o3.security/vulnerability/CVE-2024-9474","summary":"A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall…","details":"A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.\n\nCloud NGFW and Prisma Access are not impacted by this vulnerability.","published":"2024-11-18T15:48:23.405Z","modified":"2026-08-04T03:55:32.780Z","cvss":null,"epss":{"score":0.94701,"percentile":0.99853,"asOf":"2026-09-16"},"cisaKev":null,"exploitsKnown":8,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://security.paloaltonetworks.com/CVE-2024-9474"},{"type":"WEB","url":"https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/"},{"type":"EXPLOIT","url":"https://github.com/k4nfr3/CVE-2024-9474"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9474"},{"type":"WEB","url":"https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-04T03:55:32.780Z"}}