PT-2012-6289 · Palo Alto Networks · Pan-Os

Publicado 2012-04-27 · Atualizado 2020-02-17 · CVE-2012-6600

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.8 PAN-OS versions 4.1.0 through 4.1.1

Description The device-management command-line interface allows remote authenticated users to execute arbitrary commands, which can result in total compromise of the device. This issue can be exploited by injecting arbitrary shell commands using the device management command line interface.

Recommendations For PAN-OS versions 4.0.0 through 4.0.8, update to version 4.0.9 or later. For PAN-OS versions 4.1.0 through 4.1.1, update to version 4.1.2 or later.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2012-6600

Produtos afetados

Pan-Os

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-6600 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2012-6600 · Nota