The vulnerability, which the vendor tracks as PAN-SA-2024-0015, is an unauthenticated remote command execution vulnerability in PAN-OS firewall software that Palo Alto Networks assigned a 9.3 CVSS score. Word of a potential flaw came on Nov. 8 when the company published a bulletin warning that "Palo Alto Networks is aware of a claim of a remote code execution vulnerability via the PAN-OS management interface," but the vendor said it did not know any specifics. Palo Alto Networks encouraged customers to secure access to their management interfaces.