PT-2025-25362 · Palo Alto Networks · Pan-Os

Spcnvdr · Published 2025-06-11 · Updated 2025-10-22 · CVE-2025-4231

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description A command injection issue exists in Palo Alto Networks PAN-OS. Successful exploitation allows an authenticated administrative user to execute commands with root privileges. An attacker requires network access to the management web interface and valid authentication to exploit this issue. Cloud NGFW and Prisma Access are not affected. The vulnerability involves a failure to properly sanitize data at the management level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-06886

CVE-2025-4231

Affected Products

Pan-Os

References · 15

• https://safe-surf.ru/specialists/bulletins-nkcki/722422 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-4231 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06886 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-4231 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4231 · Vendor Advisory
• https://twitter.com/SecAideInfo/status/1934192933235769418 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1933324470099321234 · Twitter Post
• https://t.me/latest_high_impact_cve/2636 · Telegram Post
• https://t.me/cvetracker/26138 · Telegram Post
• https://reddit.com/r/Action1/comments/1luvbmr/%F0%9D%90%93%F0%9D%90%A8%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2%F0%9D%90%AC_%F0%9D%90%8F%F0%9D%90%9A%F0%9D%90%AD%F0%9D%90%9C%F0%9D%90%A1_%F0%9D%90%93%F0%9D%90%AE%F0%9D%90%9E%F0%9D%90%AC%F0%9D%90%9D%F0%9D%90%9A%F0%9D%90%B2_%F0%9D%90%A8%F0%9D%90%AF%F0%9D%90%9E%F0%9D%90%AB%F0%9D%90%AF%F0%9D%90%A2%F0%9D%90%9E%F0%9D%90%B0 · Reddit Post
• https://twitter.com/CveFindCom/status/1933308355084222569 · Twitter Post
• https://t.me/true_secator/7130 · Telegram Post
• https://twitter.com/CVEnew/status/1933309379077439540 · Twitter Post
• https://t.me/cveNotify/139832 · Telegram Post
• https://t.me/latest_high_impact_cve/2642 · Telegram Post