PT-2025-25361 · Palo Alto Networks · Pan-Os

Visa Inc · Published 2025-06-11 · Updated 2025-07-08 · CVE-2025-4230

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/R:U/V:D/U:Amber

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. The user must have access to the PAN-OS CLI to exploit this issue. The security risk is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma Access are not affected by this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-06885

CVE-2025-4230

Affected Products

Pan-Os

References · 11

• https://security.paloaltonetworks.com/CVE-2025-4230 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4230 · Security Note
• https://bdu.fstec.ru/vul/2025-06885 · Security Note
• https://t.me/cvetracker/26137 · Telegram Post
• https://twitter.com/CveFindCom/status/1933308403436163079 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1933327029778227215 · Twitter Post
• https://t.me/latest_high_impact_cve/2636 · Telegram Post
• https://reddit.com/r/Action1/comments/1luvbmr/%F0%9D%90%93%F0%9D%90%A8%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2%F0%9D%90%AC_%F0%9D%90%8F%F0%9D%90%9A%F0%9D%90%AD%F0%9D%90%9C%F0%9D%90%A1_%F0%9D%90%93%F0%9D%90%AE%F0%9D%90%9E%F0%9D%90%AC%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2_%F0%9D%90%A8%F0%9D%90%AF%F0%9D%90%9E%F0%9D%90%AB%F0%9D%90%AF%F0%9D%90%A2%F0%9D%90%9E%F0%9D%90%B0 · Reddit Post
• https://t.me/true_secator/7130 · Telegram Post
• https://twitter.com/CVEnew/status/1933309378171417082 · Twitter Post
• https://t.me/latest_high_impact_cve/2642 · Telegram Post