CVE Daily – Palo Alto Networks PAN-OS (High+Critical) https://cvedaily.com/pages/tags/panos.html CVE Daily – Palo Alto Networks PAN-OS (High+Critical) en Wed, 03 Jun 2026 21:26:48 +0000 [Critical] CVE-2026-0257 – Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of... https://nvd.nist.gov/vuln/detail/CVE-2026-0257 https://nvd.nist.gov/vuln/detail/CVE-2026-0257 Wed, 13 May 2026 19:17:01 +0000 Critical CVE-2026-0257

Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection. Panorama and Cloud NGFW are not impacted by these issues.

CVSS: 9.1 · CWE: CWE-565

View on NVD

]]> [High] CVE-2026-0265 – An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software en... https://nvd.nist.gov/vuln/detail/CVE-2026-0265 https://nvd.nist.gov/vuln/detail/CVE-2026-0265 Wed, 13 May 2026 18:16:14 +0000 High CVE-2026-0265

An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when any other login interfaces are used. The risk of this issue is greatly reduced if you secure ac…

CVSS: 7.2 · CWE: CWE-347

View on NVD

]]> [High] CVE-2026-0264 – A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo... https://nvd.nist.gov/vuln/detail/CVE-2026-0264 https://nvd.nist.gov/vuln/detail/CVE-2026-0264 Wed, 13 May 2026 18:16:14 +0000 High CVE-2026-0264

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS® Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition (all PAN-OS platforms except Cloud NGFW and Prisma Access) or potentially execute arbitrary code by sending specially crafted network traffic (PA-Series hardware only). Panorama, Clou…

CVSS: 7.2 · CWE: CWE-122

View on NVD

]]> [High] CVE-2026-0263 – A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PA... https://nvd.nist.gov/vuln/detail/CVE-2026-0263 https://nvd.nist.gov/vuln/detail/CVE-2026-0263 Wed, 13 May 2026 18:16:14 +0000 High CVE-2026-0263

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.

CVSS: 7.2 · CWE: CWE-787

View on NVD

]]> [Critical] CVE-2026-0300 – A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Capti... https://nvd.nist.gov/vuln/detail/CVE-2026-0300 https://nvd.nist.gov/vuln/detail/CVE-2026-0300 Wed, 06 May 2026 19:16:35 +0000 Critical CVE-2026-0300

A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Porta…

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2026-0227 – A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated... https://nvd.nist.gov/vuln/detail/CVE-2026-0227 https://nvd.nist.gov/vuln/detail/CVE-2026-0227 Thu, 15 Jan 2026 19:16:05 +0000 High CVE-2026-0227

A vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to cause a denial of service (DoS) to the firewall. Repeated attempts to trigger this issue results in the firewall entering into maintenance mode.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2025-4615 – An improper input neutralization vulnerability in the management web interface o... https://nvd.nist.gov/vuln/detail/CVE-2025-4615 https://nvd.nist.gov/vuln/detail/CVE-2025-4615 Thu, 09 Oct 2025 19:15:43 +0000 High CVE-2025-4615

An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not aff…

CVSS: 7.2 · CWE: CWE-83

View on NVD

]]> [High] CVE-2025-4231 – A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authe... https://nvd.nist.gov/vuln/detail/CVE-2025-4231 https://nvd.nist.gov/vuln/detail/CVE-2025-4231 Fri, 13 Jun 2025 00:15:23 +0000 High CVE-2025-4231

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit this issue. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

CVSS: 7.2 · CWE: CWE-77

View on NVD

]]> [High] CVE-2025-4230 – A command injection vulnerability in Palo Alto Networks PAN-OS® software enables... https://nvd.nist.gov/vuln/detail/CVE-2025-4230 https://nvd.nist.gov/vuln/detail/CVE-2025-4230 Fri, 13 Jun 2025 00:15:23 +0000 High CVE-2025-4230

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators.…

CVSS: 8.4 · CWE: CWE-78

View on NVD

]]> [High] CVE-2025-0130 – A missing exception check in Palo Alto Networks PAN-OS® software with the web pr... https://nvd.nist.gov/vuln/detail/CVE-2025-0130 https://nvd.nist.gov/vuln/detail/CVE-2025-0130 Wed, 14 May 2025 18:15:29 +0000 High CVE-2025-0130

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW…

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2025-0128 – A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Pro... https://nvd.nist.gov/vuln/detail/CVE-2025-0128 https://nvd.nist.gov/vuln/detail/CVE-2025-0128 Fri, 11 Apr 2025 02:15:19 +0000 High CVE-2025-0128

A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW is not affected by this vulnerability. Prisma®…

CVSS: 8.7 · CWE: CWE-754

View on NVD

]]> [High] CVE-2025-0127 – A command injection vulnerability in Palo Alto Networks PAN-OS® software enables... https://nvd.nist.gov/vuln/detail/CVE-2025-0127 https://nvd.nist.gov/vuln/detail/CVE-2025-0127 Fri, 11 Apr 2025 02:15:19 +0000 High CVE-2025-0127

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

CVSS: 7.1 · CWE: CWE-78

View on NVD

]]> [High] CVE-2025-0114 – A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alt... https://nvd.nist.gov/vuln/detail/CVE-2025-0114 https://nvd.nist.gov/vuln/detail/CVE-2025-0114 Wed, 12 Mar 2025 19:15:37 +0000 High CVE-2025-0114

A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access softw…

CVSS: 7.5 · CWE: CWE-400

View on NVD

]]> [High] CVE-2025-0110 – A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig pl... https://nvd.nist.gov/vuln/detail/CVE-2025-0110 https://nvd.nist.gov/vuln/detail/CVE-2025-0110 Wed, 12 Feb 2025 21:15:16 +0000 High CVE-2025-0110

A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands. The commands are run as the “__openconfig” user (which has the Device Administrator role) on the firewall. You can greatly reduce the risk…

CVSS: 8.6 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2025-0108 – An authentication bypass in the Palo Alto Networks PAN-OS software enables an un... https://nvd.nist.gov/vuln/detail/CVE-2025-0108 https://nvd.nist.gov/vuln/detail/CVE-2025-0108 Wed, 12 Feb 2025 21:15:16 +0000 Critical CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentialit…

CVSS: 9.1 · CWE: CWE-306

View on NVD

]]> [High] CVE-2024-3393 – A Denial of Service vulnerability in the DNS Security feature of Palo Alto Netwo... https://nvd.nist.gov/vuln/detail/CVE-2024-3393 https://nvd.nist.gov/vuln/detail/CVE-2024-3393 Fri, 27 Dec 2024 10:15:17 +0000 High CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

CVSS: 7.5 · CWE: CWE-754

View on NVD

]]> [High] CVE-2024-9474 – A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allow... https://nvd.nist.gov/vuln/detail/CVE-2024-9474 https://nvd.nist.gov/vuln/detail/CVE-2024-9474 Mon, 18 Nov 2024 16:15:29 +0000 High CVE-2024-9474

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

CVSS: 7.2 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2024-0012 – An authentication bypass in Palo Alto Networks PAN-OS software enables an unauth... https://nvd.nist.gov/vuln/detail/CVE-2024-0012 https://nvd.nist.gov/vuln/detail/CVE-2024-0012 Mon, 18 Nov 2024 16:15:11 +0000 Critical CVE-2024-0012

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .…

CVSS: 9.8 · CWE: CWE-306

View on NVD

]]> [High] CVE-2024-9472 – A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Serie... https://nvd.nist.gov/vuln/detail/CVE-2024-9472 https://nvd.nist.gov/vuln/detail/CVE-2024-9472 Thu, 14 Nov 2024 10:15:09 +0000 High CVE-2024-9472

A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when Decryption policy is enabled allows an unauthenticated attacker to crash PAN-OS by sending specific traffic through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in…

CVSS: 8.7 · CWE: CWE-476

View on NVD

]]> [High] CVE-2024-2551 – A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software e... https://nvd.nist.gov/vuln/detail/CVE-2024-2551 https://nvd.nist.gov/vuln/detail/CVE-2024-2551 Thu, 14 Nov 2024 10:15:04 +0000 High CVE-2024-2551

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2024-2550 – A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Al... https://nvd.nist.gov/vuln/detail/CVE-2024-2550 https://nvd.nist.gov/vuln/detail/CVE-2024-2550 Thu, 14 Nov 2024 10:15:04 +0000 High CVE-2024-2550

A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

CVSS: 7.5 · CWE: CWE-476

View on NVD

]]> [High] CVE-2024-9468 – A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows a... https://nvd.nist.gov/vuln/detail/CVE-2024-9468 https://nvd.nist.gov/vuln/detail/CVE-2024-9468 Wed, 09 Oct 2024 17:15:20 +0000 High CVE-2024-9468

A memory corruption vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker to crash PAN-OS due to a crafted packet through the data plane, resulting in a denial of service (DoS) condition. Repeated attempts to trigger this condition will result in PAN-OS entering maintenance mode.

CVSS: 7.5 · CWE: CWE-787

View on NVD

]]> [High] CVE-2024-8691 – A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS softwar... https://nvd.nist.gov/vuln/detail/CVE-2024-8691 https://nvd.nist.gov/vuln/detail/CVE-2024-8691 Wed, 11 Sep 2024 17:15:14 +0000 High CVE-2024-8691

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from GlobalProtect. Upon exploitation, PAN-OS logs indicate that the impersonated user authenticated to GlobalPr…

CVSS: 7.1 · CWE: CWE-863

View on NVD

]]> [High] CVE-2024-8687 – An information exposure vulnerability exists in Palo Alto Networks PAN-OS softwa... https://nvd.nist.gov/vuln/detail/CVE-2024-8687 https://nvd.nist.gov/vuln/detail/CVE-2024-8687 Wed, 11 Sep 2024 17:15:14 +0000 High CVE-2024-8687

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally…

CVSS: 7.1 · CWE: CWE-497

View on NVD

]]> [High] CVE-2024-8686 – A command injection vulnerability in Palo Alto Networks PAN-OS software enables ... https://nvd.nist.gov/vuln/detail/CVE-2024-8686 https://nvd.nist.gov/vuln/detail/CVE-2024-8686 Wed, 11 Sep 2024 17:15:14 +0000 High CVE-2024-8686

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.

CVSS: 7.2 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2024-3400 – A command injection as a result of arbitrary file creation vulnerability in the ... https://nvd.nist.gov/vuln/detail/CVE-2024-3400 https://nvd.nist.gov/vuln/detail/CVE-2024-3400 Fri, 12 Apr 2024 08:15:06 +0000 Critical CVE-2024-3400

A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

CVSS: 10.0 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-3385 – A packet processing mechanism in Palo Alto Networks PAN-OS software enables a re... https://nvd.nist.gov/vuln/detail/CVE-2024-3385 https://nvd.nist.gov/vuln/detail/CVE-2024-3385 Wed, 10 Apr 2024 17:15:57 +0000 High CVE-2024-3385

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-3384 – A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker ... https://nvd.nist.gov/vuln/detail/CVE-2024-3384 https://nvd.nist.gov/vuln/detail/CVE-2024-3384 Wed, 10 Apr 2024 17:15:57 +0000 High CVE-2024-3384

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

CVSS: 7.5 · CWE: CWE-1286

View on NVD

]]> [High] CVE-2024-3383 – A vulnerability in how Palo Alto Networks PAN-OS software processes data receive... https://nvd.nist.gov/vuln/detail/CVE-2024-3383 https://nvd.nist.gov/vuln/detail/CVE-2024-3383 Wed, 10 Apr 2024 17:15:57 +0000 High CVE-2024-3383

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

CVSS: 7.4 · CWE: CWE-282

View on NVD

]]> [High] CVE-2024-3382 – A memory leak exists in Palo Alto Networks PAN-OS software that enables an attac... https://nvd.nist.gov/vuln/detail/CVE-2024-3382 https://nvd.nist.gov/vuln/detail/CVE-2024-3382 Wed, 10 Apr 2024 17:15:56 +0000 High CVE-2024-3382

A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that are running PAN-OS software with the SSL Forward Proxy feature enabled.

CVSS: 7.5 · CWE: CWE-770

View on NVD

]]> [High] CVE-2023-6790 – A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-O... https://nvd.nist.gov/vuln/detail/CVE-2023-6790 https://nvd.nist.gov/vuln/detail/CVE-2023-6790 Wed, 13 Dec 2023 19:15:09 +0000 High CVE-2023-6790

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

CVSS: 8.8 · CWE: CWE-79

View on NVD

]]> [High] CVE-2022-0030 – An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web ... https://nvd.nist.gov/vuln/detail/CVE-2022-0030 https://nvd.nist.gov/vuln/detail/CVE-2022-0030 Wed, 12 Oct 2022 17:15:10 +0000 High CVE-2022-0030

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

CVSS: 8.1 · CWE: CWE-290

View on NVD

]]> [High] CVE-2022-0024 – A vulnerability exists in Palo Alto Networks PAN-OS software that enables an aut... https://nvd.nist.gov/vuln/detail/CVE-2022-0024 https://nvd.nist.gov/vuln/detail/CVE-2022-0024 Wed, 11 May 2022 17:15:09 +0000 High CVE-2022-0024

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committed on both hardware and virtual firewalls. This issue does not impact Panorama appliances or Prisma Ac…

CVSS: 7.2 · CWE: CWE-138

View on NVD

]]> [High] CVE-2021-3059 – An OS command injection vulnerability in the Palo Alto Networks PAN-OS managemen... https://nvd.nist.gov/vuln/detail/CVE-2021-3059 https://nvd.nist.gov/vuln/detail/CVE-2021-3059 Wed, 10 Nov 2021 17:15:10 +0000 High CVE-2021-3059

An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynamic updates. This vulnerability enables a man-in-the-middle attacker to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than…

CVSS: 8.1 · CWE: CWE-78

View on NVD

]]> [High] CVE-2021-3058 – An OS command injection vulnerability in the Palo Alto Networks PAN-OS web inter... https://nvd.nist.gov/vuln/detail/CVE-2021-3058 https://nvd.nist.gov/vuln/detail/CVE-2021-3058 Wed, 10 Nov 2021 17:15:09 +0000 High CVE-2021-3058

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permissions to use XML API the ability to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; P…

CVSS: 8.8 · CWE: CWE-78

View on NVD

]]> [High] CVE-2021-3056 – A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Cli... https://nvd.nist.gov/vuln/detail/CVE-2021-3056 https://nvd.nist.gov/vuln/detail/CVE-2021-3056 Wed, 10 Nov 2021 17:15:09 +0000 High CVE-2021-3056

A memory corruption vulnerability in Palo Alto Networks PAN-OS GlobalProtect Clientless VPN enables an authenticated attacker to execute arbitrary code with root user privileges during SAML authentication. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier t…

CVSS: 8.8 · CWE: CWE-120

View on NVD

]]> [High] CVE-2021-3054 – A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo... https://nvd.nist.gov/vuln/detail/CVE-2021-3054 https://nvd.nist.gov/vuln/detail/CVE-2021-3054 Wed, 08 Sep 2021 17:15:12 +0000 High CVE-2021-3054

A time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator with permission to upload plugins to execute arbitrary code with root user privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9…

CVSS: 7.2 · CWE: CWE-367

View on NVD

]]> [High] CVE-2021-3053 – An improper handling of exceptional conditions vulnerability exists in the Palo ... https://nvd.nist.gov/vuln/detail/CVE-2021-3053 https://nvd.nist.gov/vuln/detail/CVE-2021-3053 Wed, 08 Sep 2021 17:15:12 +0000 High CVE-2021-3053

An improper handling of exceptional conditions vulnerability exists in the Palo Alto Networks PAN-OS dataplane that enables an unauthenticated network-based attacker to send specifically crafted traffic through the firewall that causes the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into mainte…

CVSS: 7.5 · CWE: CWE-755

View on NVD

]]> [High] CVE-2021-3050 – An OS command injection vulnerability in the Palo Alto Networks PAN-OS web inter... https://nvd.nist.gov/vuln/detail/CVE-2021-3050 https://nvd.nist.gov/vuln/detail/CVE-2021-3050 Wed, 11 Aug 2021 17:15:07 +0000 High CVE-2021-3050

An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10; PAN-OS 10.0 version 10.0.7 and earlier PAN-OS 10.0 versions; PAN-OS 10.1 version 10.1.0 through PAN-O…

CVSS: 8.8 · CWE: CWE-78

View on NVD

]]> [High] CVE-2020-2050 – An authentication bypass vulnerability exists in the GlobalProtect SSL VPN compo... https://nvd.nist.gov/vuln/detail/CVE-2020-2050 https://nvd.nist.gov/vuln/detail/CVE-2020-2050 Thu, 12 Nov 2020 00:15:10 +0000 High CVE-2020-2050

An authentication bypass vulnerability exists in the GlobalProtect SSL VPN component of Palo Alto Networks PAN-OS software that allows an attacker to bypass all client certificate checks with an invalid certificate. A remote attacker can successfully authenticate as any user and gain access to restricted VPN network resources when the gateway or portal is configured to rely entirely on certificat…

CVSS: 8.2 · CWE: CWE-285

View on NVD

]]> [High] CVE-2020-2041 – An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 ... https://nvd.nist.gov/vuln/detail/CVE-2020-2041 https://nvd.nist.gov/vuln/detail/CVE-2020-2041 Wed, 09 Sep 2020 17:15:25 +0000 High CVE-2020-2041

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts all versions of…

CVSS: 7.5 · CWE: CWE-16

View on NVD

]]> [High] CVE-2020-2013 – A cleartext transmission of sensitive information vulnerability in Palo Alto Net... https://nvd.nist.gov/vuln/detail/CVE-2020-2013 https://nvd.nist.gov/vuln/detail/CVE-2020-2013 Wed, 13 May 2020 19:15:14 +0000 High CVE-2020-2013

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie. When an administrator issues a context switch request into a managed firewall with an affected PAN-OS Panorama version, their PAN-OS session cookie is transmitted over cleartext to the firewall. An attacker with the abi…

CVSS: 8.3 · CWE: CWE-319

View on NVD

]]> [High] CVE-2020-2011 – An improper input validation vulnerability in the configuration daemon of Palo A... https://nvd.nist.gov/vuln/detail/CVE-2020-2011 https://nvd.nist.gov/vuln/detail/CVE-2020-2011 Wed, 13 May 2020 19:15:13 +0000 High CVE-2020-2011

An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for a remote unauthenticated user to send a specifically crafted registration request to the device that causes the configuration service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS Panorama services by restarting the device and putting…

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2020-2009 – An external control of filename vulnerability in the SD WAN component of Palo Al... https://nvd.nist.gov/vuln/detail/CVE-2020-2009 https://nvd.nist.gov/vuln/detail/CVE-2020-2009 Wed, 13 May 2020 19:15:13 +0000 High CVE-2020-2009

An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in arbitrary code execution with root permissions. This issue affects: All versions of PAN-OS 7.1; PAN-OS…

CVSS: 7.2 · CWE: CWE-73

View on NVD

]]> [High] CVE-2020-2008 – An OS command injection and external control of filename vulnerability in Palo A... https://nvd.nist.gov/vuln/detail/CVE-2020-2008 https://nvd.nist.gov/vuln/detail/CVE-2020-2008 Wed, 13 May 2020 19:15:13 +0000 High CVE-2020-2008

An OS command injection and external control of filename vulnerability in Palo Alto Networks PAN-OS allows authenticated administrators to execute code with root privileges or delete arbitrary system files and impact the system's integrity or cause a denial of service condition. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.14.

CVSS: 7.2 · CWE: CWE-73

View on NVD

]]> [High] CVE-2020-2002 – An authentication bypass by spoofing vulnerability exists in the authentication ... https://nvd.nist.gov/vuln/detail/CVE-2020-2002 https://nvd.nist.gov/vuln/detail/CVE-2020-2002 Wed, 13 May 2020 19:15:12 +0000 High CVE-2020-2002

An authentication bypass by spoofing vulnerability exists in the authentication daemon and User-ID components of Palo Alto Networks PAN-OS by failing to verify the integrity of the Kerberos key distribution center (KDC) before authenticating users. This affects all forms of authentication that use a Kerberos authentication profile. A man-in-the-middle type of attacker with the ability to intercep…

CVSS: 8.1 · CWE: CWE-290

View on NVD

]]> [High] CVE-2020-2001 – An external control of path and data vulnerability in the Palo Alto Networks PAN... https://nvd.nist.gov/vuln/detail/CVE-2020-2001 https://nvd.nist.gov/vuln/detail/CVE-2020-2001 Wed, 13 May 2020 19:15:12 +0000 High CVE-2020-2001

An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenticated user with network access to PAN-OS management interface to write attacker supplied file on the system and elevate privileges. This issue affects: All PAN-OS 7.1 Panorama and 8.0 Panorama versions; PAN-OS 8.1 versions earlier than 8.1.12 on Panorama; PAN…

CVSS: 8.1 · CWE: CWE-123

View on NVD

]]> [High] CVE-2020-1992 – A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series ... https://nvd.nist.gov/vuln/detail/CVE-2020-1992 https://nvd.nist.gov/vuln/detail/CVE-2020-1992 Wed, 08 Apr 2020 19:15:14 +0000 High CVE-2020-1992

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.2 on PA-7000 Series devices with an LFC in…

CVSS: 8.1 · CWE: CWE-134

View on NVD

]]> [High] CVE-2020-1990 – A stack-based buffer overflow vulnerability in the management server component o... https://nvd.nist.gov/vuln/detail/CVE-2020-1990 https://nvd.nist.gov/vuln/detail/CVE-2020-1990 Wed, 08 Apr 2020 19:15:14 +0000 High CVE-2020-1990

A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. This issue does not affect PAN-OS 7.1.

CVSS: 7.2 · CWE: CWE-121

View on NVD

]]> [High] CVE-2019-17437 – An improper authentication check in Palo Alto Networks PAN-OS may allow an authe... https://nvd.nist.gov/vuln/detail/CVE-2019-17437 https://nvd.nist.gov/vuln/detail/CVE-2019-17437 Thu, 05 Dec 2019 15:15:11 +0000 High CVE-2019-17437

An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9.0 versions prior to 9.0.5. PAN-OS version 7.0 and prior EOL versions have not been evaluated for this…

CVSS: 7.8 · CWE: CWE-280

View on NVD

]]> [Critical] CVE-2017-15944 – Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.1... https://nvd.nist.gov/vuln/detail/CVE-2017-15944 https://nvd.nist.gov/vuln/detail/CVE-2017-15944 Mon, 11 Dec 2017 17:29:00 +0000 Critical CVE-2017-15944

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2017-15942 – Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.1... https://nvd.nist.gov/vuln/detail/CVE-2017-15942 https://nvd.nist.gov/vuln/detail/CVE-2017-15942 Mon, 11 Dec 2017 17:29:00 +0000 High CVE-2017-15942

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2017-15940 – The web interface packet capture management component in Palo Alto Networks PAN-... https://nvd.nist.gov/vuln/detail/CVE-2017-15940 https://nvd.nist.gov/vuln/detail/CVE-2017-15940 Mon, 11 Dec 2017 17:29:00 +0000 Critical CVE-2017-15940

The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.

CVSS: 9.8 · CWE: CWE-77

View on NVD

]]> [Critical] CVE-2017-9458 – XML external entity (XXE) vulnerability in the GlobalProtect internal and extern... https://nvd.nist.gov/vuln/detail/CVE-2017-9458 https://nvd.nist.gov/vuln/detail/CVE-2017-9458 Thu, 07 Sep 2017 13:29:00 +0000 Critical CVE-2017-9458

XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or conduct server-side request forgery (SSRF) attacks via unspecified vectors.

CVSS: 9.8 · CWE: CWE-611

View on NVD

]]> [Critical] CVE-2017-8390 – The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1... https://nvd.nist.gov/vuln/detail/CVE-2017-8390 https://nvd.nist.gov/vuln/detail/CVE-2017-8390 Wed, 02 Aug 2017 19:29:00 +0000 Critical CVE-2017-8390

The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 allows remote attackers to execute arbitrary code via a crafted domain name.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2017-7945 – The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17,... https://nvd.nist.gov/vuln/detail/CVE-2017-7945 https://nvd.nist.gov/vuln/detail/CVE-2017-7945 Sat, 29 Apr 2017 00:59:00 +0000 Critical CVE-2017-7945

The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names and conduct brute-force attacks via a series of requests, aka PAN-SA-2017-0014 and PAN-72769.

CVSS: 9.8 · CWE: CWE-209

View on NVD

]]> [High] CVE-2017-7218 – The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows re... https://nvd.nist.gov/vuln/detail/CVE-2017-7218 https://nvd.nist.gov/vuln/detail/CVE-2017-7218 Fri, 14 Apr 2017 14:59:00 +0000 High CVE-2017-7218

The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2016-9151 – Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.1... https://nvd.nist.gov/vuln/detail/CVE-2016-9151 https://nvd.nist.gov/vuln/detail/CVE-2016-9151 Sat, 19 Nov 2016 06:59:03 +0000 High CVE-2016-9151

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.

CVSS: 7.8 · CWE: CWE-264

View on NVD

]]> [Critical] CVE-2016-9150 – Buffer overflow in the management web interface in Palo Alto Networks PAN-OS bef... https://nvd.nist.gov/vuln/detail/CVE-2016-9150 https://nvd.nist.gov/vuln/detail/CVE-2016-9150 Sat, 19 Nov 2016 06:59:01 +0000 Critical CVE-2016-9150

Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2016-1712 – Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.1... https://nvd.nist.gov/vuln/detail/CVE-2016-1712 https://nvd.nist.gov/vuln/detail/CVE-2016-1712 Tue, 02 Aug 2016 16:59:00 +0000 High CVE-2016-1712

Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2016-3657 – Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before ... https://nvd.nist.gov/vuln/detail/CVE-2016-3657 https://nvd.nist.gov/vuln/detail/CVE-2016-3657 Tue, 12 Apr 2016 17:59:05 +0000 Critical CVE-2016-3657

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request.

CVSS: 9.8 · CWE: CWE-119

View on NVD

]]> [High] CVE-2016-3656 – The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x befor... https://nvd.nist.gov/vuln/detail/CVE-2016-3656 https://nvd.nist.gov/vuln/detail/CVE-2016-3656 Tue, 12 Apr 2016 17:59:05 +0000 High CVE-2016-3656

The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial of service (service crash) via a crafted request.

CVSS: 7.5 · CWE: CWE-119

View on NVD

]]> [Critical] CVE-2016-3655 – The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x b... https://nvd.nist.gov/vuln/detail/CVE-2016-3655 https://nvd.nist.gov/vuln/detail/CVE-2016-3655 Tue, 12 Apr 2016 17:59:04 +0000 Critical CVE-2016-3655

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call.

CVSS: 9.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2016-3654 – The device management command line interface (CLI) in Palo Alto Networks PAN-OS ... https://nvd.nist.gov/vuln/detail/CVE-2016-3654 https://nvd.nist.gov/vuln/detail/CVE-2016-3654 Tue, 12 Apr 2016 17:59:03 +0000 High CVE-2016-3654

The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.

CVSS: 7.2 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2012-6605 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6605 https://nvd.nist.gov/vuln/detail/CVE-2012-6605 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6605

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6604 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6604 https://nvd.nist.gov/vuln/detail/CVE-2012-6604 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6604

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6603 – The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4... https://nvd.nist.gov/vuln/detail/CVE-2012-6603 https://nvd.nist.gov/vuln/detail/CVE-2012-6603 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6603

The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034.

CVSS: 10.0 · CWE: CWE-287

View on NVD

]]> [Critical] CVE-2012-6602 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6602 https://nvd.nist.gov/vuln/detail/CVE-2012-6602 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6602

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6601 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6601 https://nvd.nist.gov/vuln/detail/CVE-2012-6601 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6601

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.

CVSS: 10.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6600 – The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x ... https://nvd.nist.gov/vuln/detail/CVE-2012-6600 https://nvd.nist.gov/vuln/detail/CVE-2012-6600 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6600

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6599 – The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x ... https://nvd.nist.gov/vuln/detail/CVE-2012-6599 https://nvd.nist.gov/vuln/detail/CVE-2012-6599 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6599

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33476.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6598 – The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x ... https://nvd.nist.gov/vuln/detail/CVE-2012-6598 https://nvd.nist.gov/vuln/detail/CVE-2012-6598 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6598

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6595 – The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x ... https://nvd.nist.gov/vuln/detail/CVE-2012-6595 https://nvd.nist.gov/vuln/detail/CVE-2012-6595 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6595

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6594 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6594 https://nvd.nist.gov/vuln/detail/CVE-2012-6594 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6594

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6593 – Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote att... https://nvd.nist.gov/vuln/detail/CVE-2012-6593 https://nvd.nist.gov/vuln/detail/CVE-2012-6593 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6593

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.

CVSS: 10.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6592 – Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote att... https://nvd.nist.gov/vuln/detail/CVE-2012-6592 https://nvd.nist.gov/vuln/detail/CVE-2012-6592 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6592

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 31091.

CVSS: 10.0 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2012-6591 – The device-management command-line interface in Palo Alto Networks PAN-OS before... https://nvd.nist.gov/vuln/detail/CVE-2012-6591 https://nvd.nist.gov/vuln/detail/CVE-2012-6591 Sat, 31 Aug 2013 17:55:03 +0000 Critical CVE-2012-6591

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 31116.

CVSS: 9.0 · CWE: CWE-78

View on NVD

]]>