← CVE Intelligence

CVE-2023-6792

PAN-OS: OS Command Injection Vulnerability in the XML API PUBLISHED

Description (CNA)

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.1 before 8.1.24; affected 9.0 before 9.0.17; affected 9.1 before 9.1.15; affected 10.0 before 10.0.12; affected 10.1 before 10.1.6; unaffected 10.2 before All; unaffected 11.0 before All; unaffected 11.1 before All
Palo Alto Networks / Prisma Accessunaffected All
Palo Alto Networks / Cloud NGFWunaffected All

CWE

CWE-88

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.