PT-2023-8113 · Palo Alto Networks · Pan-Os

Ethan Shackelford · Publicado 2023-12-13 · Atualizado 2023-12-18 · CVE-2023-6792

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:M/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description The issue is related to an OS command injection vulnerability in the XML API of PAN-OS software. This vulnerability exists due to the lack of neutralization of special elements used in the OS command. An authenticated API user can exploit this vulnerability to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Argument Injection

OS Command Injection

Enumeração de Fraquezas

CWE-88

CWE-78

Identificadores relacionados

BDU:2024-00092

CVE-2023-6792

Produtos afetados

Pan-Os

Referências · 6

• https://twitter.com/VulmonFeeds/status/1735003626500730892 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1735006292832571468 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-6792 · Nota de Segurança
• https://bdu.fstec.ru/vul/2024-00092 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2023-6792 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-6792 · Aviso do Fabricante