Description (CNA)
A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW and Prisma Access® are not impacted by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / PAN-OS | affected 12.1.0 before 12.1.8; affected 11.2.0 before 11.2.13; affected 11.1.0 before 11.1.16; affected 10.2.0 before 10.2.18-h8 |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-78
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.