Lucene search
HistoryAug 31, 2013 - 5:55 p.m.
CVE-2012-6602
palo alto networks
pan-os
command-line interface
vulnerability
remote exploit
authentication
cve-2012-6602
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.4%
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122.
Affected configurations
Node
paloaltonetworkspan-osRange≤3.1.9
ORpaloaltonetworkspan-osMatch4.0.0
ORpaloaltonetworkspan-osMatch4.0.1
ORpaloaltonetworkspan-osMatch4.0.2
ORpaloaltonetworkspan-osMatch4.0.3
Related
paloalto
paloalto
Command Injection Vulnerability
2012-04-27 23:30:00
cvelist
cvelist
CVE-2012-6602
2013-08-31 17:00:00
prion
prion
Command injection
2013-08-31 17:55:00
nvd
nvd
CVE-2012-6602
2013-08-31 17:55:03
nessus
nessus
Palo Alto Networks PAN-OS < 3.1.10 / 4.x < 4.0.4 Multiple Command Injections
2014-03-05 00:00:00
9 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
7.5 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
54.4%
Related for CVE-2012-6602