PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-0012] Bishop Fox ASM Delivers 24-Hour Head Start Against Critical PAN-OS Vulnerability

bishopfox.com | vulnerability | CVE-2024-0012 | #threat-intelligence | #attack-surface-management | #vulnerability | #palo-alto-networks | #pan-os | #cve-2024-0012
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Case study: Bishop Fox's Cosmos fingerprinted PAN-OS assets and warned customers about CVE-2024-0012 a full 24 hours before public exploits spread, leveraging firmware diffing and CPE matching.
CVE
CVE-2024-0012
Published
Collected

Related coverage

High · vulnerability · bishopfox.com
Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass
Bishop Fox publishes a detector for CVE-2026-0265, a pre-auth JWT signature bypass in PAN-OS and Panorama reachable when CAS is attached to an auth profile; one anonymous request yields a verdict.
vulnerability · bishopfox.com
PAN-OS CVE-2024-3400: Patch Your Palo Alto Firewalls
Bishop Fox shares details on PAN-OS CVE-2024-3400, a critical pre-auth RCE chain in GlobalProtect, including bypasses of Palo Alto's interim mitigations and new Threat Prevention rule IDs.
vulnerability · wiz.io
Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild
CVE-2026-0300: a buffer overflow in PAN-OS User-ID Authentication Portal (CVSS 9.3) allows unauthenticated root RCE, with limited in-the-wild exploitation of exposed instances; patching advised.
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
vulnerability · volexity.com
CVE-2014-6271 – Remotely Exploitable Vulnerability in Bash
With the excitement of public details of a remotely exploitable vulnerability in bash (CVE-2014-6271) coming to light today, we decided it was as good of time as any to finally […]
blog · wiz.io
Wiz observes exploitation in the wild of PAN-OS vulnerabilities
Wiz Threat Research tracks in-the-wild exploitation of chained PAN-OS flaws CVE-2024-0012 and CVE-2024-9474 enabling unauthenticated RCE, and maps cloud exposure to vulnerable firewalls.
Back