What is CVE-2024-8686?

CVE-2024-8686 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2024-8686 PAN-OS: Command Injection Vulnerability

Which CVE IDs does CVE-2024-8686 cover?

CVE-2024-8686 covers the following CVE IDs: CVE-2024-8686. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2024-8686?

CVE-2024-8686 affects 3 products, including: Cloud NGFW; PAN-OS; Prisma Access.

CVE-2024-8686High

CVE-2024-8686 PAN-OS: Command Injection Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

September 11, 2024

Last Modified

September 11, 2024

🔗 CVE IDs covered (1)

CVE-2024-8686 →

📋 Description

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.

🎯 Affected products3

Cloud NGFW
PAN-OS
Prisma Access

✅ Remediation

This issue is fixed in PAN-OS 11.2.3 and all later PAN-OS versions. Workarounds and mitigations: TBD

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2024-8686