Palo Alto Networks Management Interface Attack

Palo Alto Networks has recently disclosed two zero-day vulnerabilities, CVE-2024-0012 and CVE-2024-9474, affecting the PAN-OS firewall and other products. Both flaws, which are actively being exploited in the wild, affect the PAN-OS Management Web Interface. Successful exploitations allows attackers to bypass authentication and gain administrator-level access without any user interaction.