VULNERABILITY INTELLIGENCE

CVE-2024-5911

CVSS score4.9 MEDIUM
EPSS probability0.58%
CISA KEVNot currently listed
Published2024-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-434

Primary references