PT-2012-6288 · Palo Alto Networks · Pan-Os

Publicado 2012-04-27 · Atualizado 2020-02-17 · CVE-2012-6599

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.7 PAN-OS versions 4.1.0

Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total compromise of the device.

Recommendations For PAN-OS versions 4.0.0 through 4.0.7, update to version 4.0.8 or later. For PAN-OS versions 4.1.0, update to version 4.1.1 or later. As a temporary workaround, consider restricting access to the device-management command-line interface until a patch is available.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2012-6599

Produtos afetados

Pan-Os

Referências · 2

• https://security.paloaltonetworks.com/CVE-2012-6599 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-6599 · Nota de Segurança