Statement on CVE 2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface

Statement on CVE 2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface#

January 30, 2025

Information#

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Risk#

Not Applicable

Response#

Melissa Data Corporation (“Melissa”) was not impacted by the Palo Alto Vulnerability as Melissa does not utilize Palo Alto software for any Melissa commercial web services or products.

Melissa will continue to follow all guidance provided for this vulnerability as necessary to prevent any future risks.

Contents