← CVE Intelligence

CVE-2025-4231

PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface PUBLISHED

Description (CNA)

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit this issue. Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cloud NGFWunaffected All before 6.3.3
Palo Alto Networks / PAN-OSunaffected 11.2.0; unaffected 11.1.0; affected 11.0.0 before 11.0.3; affected 10.2.0 before 10.2.8; affected 10.1.0
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-77

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.