topic Re: Upgrade CVE-2024-0012 and CVE-2024-3393 in Next-Generation Firewall Discussions

Upgrade CVE-2024-0012 and CVE-2024-3393

M.Fawzi — Wed, 15 Jan 2025 10:43:42 GMT

we need to upgrade paloalto from version 10.2.9.h1 to version version 10.2.9.h19 as a CVE Remediated

is this version will mitigate this two CVEs

C.CortijoSantamara — Wed, 15 Jan 2025 13:16:53 GMT

Hi M.Fawzi
If you are in PAN-OS 10.2

In the CVE-2024-3393 you can consult this link: https://security.paloaltonetworks.com/CVE-2024-0012 you need update to 10.2.12-h2 minumun

In the CVE-2024-0012 you can consult this link: https://security.paloaltonetworks.com/CVE-2024-0012 you need update to 10.2.14 minimun.

You can't update 10.2.9.h19 that version is affected for the 2 cve's. Update to 10.2.14.

If u need help to update I can help you.

Thanks and good luck!

zahmed01 — Thu, 16 Jan 2025 18:59:39 GMT

Hello,

As mentioned earlier, in the two links for the CVE specify what is 10.2.x code train that has the fix for the vulnerability.

CVE 2024-0012 has fix in >= 10.2.12-h2

CVE 2024-3393- has fix in

Feel free to comment if you have further questions,