CVE-2024-5913

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Jul 10, 2024
Source updated: Aug 6, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

PAN-OS: Improper Input Validation Vulnerability in PAN-OS

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

PAN-OS

Vendor: Palo Alto Networks
Product: PAN-OS
Platforms: Unknown
Default status: unaffected

PAN-OS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
10.1.0	`affected`	custom	10.1.14-h2	Unavailable	`10.1.14-h2` → `unaffected`
10.2.0	`affected`	custom	10.2.10	Unavailable	`10.2.10` → `unaffected`
11.0.0	`affected`	custom	11.0.5	Unavailable	`11.0.5` → `unaffected`
11.1.0	`affected`	custom	11.1.4	Unavailable	`11.1.4` → `unaffected`
11.2.0	`affected`	custom	11.2.1	Unavailable	`11.2.1` → `unaffected`

Cloud NGFW

Vendor: Palo Alto Networks
Product: Cloud NGFW
Platforms: Unknown
Default status: unaffected

Cloud NGFW · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
None	`affected`	Unavailable	Unavailable	Unavailable	None listed
All	`unaffected`	Unavailable	Unavailable	Unavailable	None listed

Prisma Access

Vendor: Palo Alto Networks
Product: Prisma Access
Platforms: Unknown
Default status: unaffected

Prisma Access · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
None	`affected`	Unavailable	Unavailable	Unavailable	None listed
All	`unaffected`	Unavailable	Unavailable	Unavailable	None listed