1. Home
  2. CVE Database
  3. CVE-2024-5911
MEDIUM · 4.9

CVE-2024-5911

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash ...

Vulnerability Description

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
PaloaltonetworksPan-Os>= 10.1.0, < 10.1.9

Related Weaknesses (CWE)

CWE-434

References

FAQ

What is CVE-2024-5911?

CVE-2024-5911 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash ...

How severe is CVE-2024-5911?

CVE-2024-5911 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-5911?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Pan-Os.