CVSS 7.2 · High EPSS 1,7%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada paloaltonetworks pan-os. Skor CVSS 3.1 7.2 (High) menurut NVD.
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| paloaltonetworks | pan-os | Versi 10.2.0 hingga sebelum 10.2.7 |
| paloaltonetworks | pan-os | Versi 10.2.8 hingga sebelum 10.2.10 |
| paloaltonetworks | pan-os | Versi 10.2.11 hingga sebelum 10.2.13 |
| paloaltonetworks | pan-os | Versi 10.2.14 hingga sebelum 10.2.16 |
| paloaltonetworks | pan-os | Versi 10.2.7 |
| paloaltonetworks | pan-os | Versi 10.2.7 h1 |
| paloaltonetworks | pan-os | Versi 10.2.7 h10 |
| paloaltonetworks | pan-os | Versi 10.2.7 h11 |
| paloaltonetworks | pan-os | Versi 10.2.7 h12 |
| paloaltonetworks | pan-os | Versi 10.2.7 h13 |
| paloaltonetworks | pan-os | Versi 10.2.7 h14 |
| paloaltonetworks | pan-os | Versi 10.2.7 h15 |
| paloaltonetworks | pan-os | Versi 10.2.7 h16 |
| paloaltonetworks | pan-os | Versi 10.2.7 h17 |
| paloaltonetworks | pan-os | Versi 10.2.7 h18 |
| paloaltonetworks | pan-os | Versi 10.2.7 h19 |
| paloaltonetworks | pan-os | Versi 10.2.7 h2 |
| paloaltonetworks | pan-os | Versi 10.2.7 h20 |
| paloaltonetworks | pan-os | Versi 10.2.7 h21 |
| paloaltonetworks | pan-os | Versi 10.2.7 h22 |
| paloaltonetworks | pan-os | Versi 10.2.7 h23 |
| paloaltonetworks | pan-os | Versi 10.2.7 h24 |
| paloaltonetworks | pan-os | Versi 10.2.7 h3 |
| paloaltonetworks | pan-os | Versi 10.2.7 h32 |
| paloaltonetworks | pan-os | Versi 10.2.7 h34 |
| paloaltonetworks | pan-os | Versi 10.2.7 h35 |
| paloaltonetworks | pan-os | Versi 10.2.7 h4 |
| paloaltonetworks | pan-os | Versi 10.2.7 h5 |
| paloaltonetworks | pan-os | Versi 10.2.7 h6 |
| paloaltonetworks | pan-os | Versi 10.2.7 h7 |
| paloaltonetworks | pan-os | Versi 10.2.7 h8 |
| paloaltonetworks | pan-os | Versi 10.2.7 h9 |
| paloaltonetworks | pan-os | Versi 10.2.10 |
| paloaltonetworks | pan-os | Versi 10.2.10 h1 |
| paloaltonetworks | pan-os | Versi 10.2.10 h10 |
| paloaltonetworks | pan-os | Versi 10.2.10 h11 |
| paloaltonetworks | pan-os | Versi 10.2.10 h12 |
| paloaltonetworks | pan-os | Versi 10.2.10 h13 |
| paloaltonetworks | pan-os | Versi 10.2.10 h14 |
| paloaltonetworks | pan-os | Versi 10.2.10 h17 |
| paloaltonetworks | pan-os | Versi 10.2.10 h18 |
| paloaltonetworks | pan-os | Versi 10.2.10 h2 |
| paloaltonetworks | pan-os | Versi 10.2.10 h21 |
| paloaltonetworks | pan-os | Versi 10.2.10 h27 |
| paloaltonetworks | pan-os | Versi 10.2.10 h3 |
| paloaltonetworks | pan-os | Versi 10.2.10 h30 |
| paloaltonetworks | pan-os | Versi 10.2.10 h31 |
| paloaltonetworks | pan-os | Versi 10.2.10 h36 |
| paloaltonetworks | pan-os | Versi 10.2.10 h37 |
| paloaltonetworks | pan-os | Versi 10.2.10 h4 |
| paloaltonetworks | pan-os | Versi 10.2.10 h5 |
| paloaltonetworks | pan-os | Versi 10.2.10 h6 |
| paloaltonetworks | pan-os | Versi 10.2.10 h7 |
| paloaltonetworks | pan-os | Versi 10.2.13 |
| paloaltonetworks | pan-os | Versi 10.2.13 h1 |
| paloaltonetworks | pan-os | Versi 10.2.13 h10 |
| paloaltonetworks | pan-os | Versi 10.2.13 h15 |
| paloaltonetworks | pan-os | Versi 10.2.13 h16 |
| paloaltonetworks | pan-os | Versi 10.2.13 h18 |
| paloaltonetworks | pan-os | Versi 10.2.13 h2 |