PT-2012-6287 · Palo Alto Networks · Pan-Os

Publicado 2012-04-27 · Atualizado 2020-02-17 · CVE-2012-6598

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PAN-OS versions 4.0.0 through 4.0.7

Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total compromise of the device.

Recommendations For PAN-OS versions 4.0.0 through 4.0.7, update to version 4.0.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the device-management command-line interface to minimize the risk of exploitation.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2012-6598

Produtos afetados

Pan-Os

Referências · 2

• https://security.paloaltonetworks.com/CVE-2012-6598 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6598 · Nota de Segurança