PT-2012-6288 · Palo Alto Networks · Pan-Os
Published
2012-04-27
·
Updated
2020-02-17
·
CVE-2012-6599
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are:
PAN-OS versions 4.0.0 through 4.0.7
PAN-OS versions 4.1.0
Description
A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total compromise of the device.
Recommendations
For PAN-OS versions 4.0.0 through 4.0.7, update to version 4.0.8 or later.
For PAN-OS versions 4.1.0, update to version 4.1.1 or later.
As a temporary workaround, consider restricting access to the device-management command-line interface until a patch is available.
Fix
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pan-Os