Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hg7r-cqcx-pf83

Опубликовано: 13 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.4

Описание

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI.

The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

EPSS

Процентиль: 18%
0.00059
Низкий

8.4 High

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
8 месяцев назад

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

CVSS3: 6.7
fstec
8 месяцев назад

Уязвимость интерфейса командной строки (CLI) операционной системы PAN-OS, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольные команды

EPSS

Процентиль: 18%
0.00059
Низкий

8.4 High

CVSS4

Дефекты

CWE-78