Lucene search
HistoryAug 31, 2013 - 5:55 p.m.
CVE-2012-6594
cve-2012-6594
palo alto networks
pan-os
command line interface
remote authentication
arbitrary commands
security vulnerability.
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.4%
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.
Affected configurations
Node
paloaltonetworkspan-osRange≤3.1.10
ORpaloaltonetworkspan-osMatch3.1.9
ORpaloaltonetworkspan-osMatch4.0.0
ORpaloaltonetworkspan-osMatch4.0.1
ORpaloaltonetworkspan-osMatch4.0.2
ORpaloaltonetworkspan-osMatch4.0.3
ORpaloaltonetworkspan-osMatch4.0.4
ORpaloaltonetworkspan-osMatch4.0.5
ORpaloaltonetworkspan-osMatch4.0.6
ORpaloaltonetworkspan-osMatch4.0.7
ORpaloaltonetworkspan-osMatch4.1.0
Related
prion
prion
Command injection
2013-08-31 17:55:00
cvelist
cvelist
CVE-2012-6594
2013-08-31 17:00:00
nessus
nessus
paloalto
paloalto
Command Injection Vulnerability
2012-04-27 23:30:00
nvd
nvd
CVE-2012-6594
2013-08-31 17:55:03
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.4%
Related for CVE-2012-6594