RCE Vulnerability in PAN-OS Exploited in-the-Wild (Campaign)

Palo Alto Networks has confirmed active exploitation of a critical unauthenticated remote code execution vulnerability (CVE-2024-0012) in the PAN-OS management interface that can bypass authentication and grant administrator privileges; customers are advised to restrict management interface access to trusted internal IPs per best practices, with Prisma Access and cloud NGFW believed unaffected and exploitation detected as of November 17, 2024.