CVE-2024-0012—Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Vulnerability Name

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Description

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:

KNOWN

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.

Additional Notes

• https://security.paloaltonetworks.com/CVE-2024-0012
• https://nvd.nist.gov/vuln/detail/CVE-2024-0012

Related News Articles

• Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency MinerJuly 17, 2025
• Attackers are chaining flaws to breach Palo Alto Networks firewallsFebruary 19, 2025
• Chinese APT 'Emperor Dragonfly' Moonlights With RansomwareFebruary 13, 2025
• Chinese espionage tools deployed in RA World ransomware attackFebruary 13, 2025
• RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetFebruary 13, 2025

Related Weaknesses

• CWE-306