CVE-2023-6794

🗓️ 13 Dec 2023 18:16:39Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 58 Views

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator to disrupt system processes and execute arbitrary code with limited privileges on the firewall

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-6794	18 Dec 202310:07	–	circl
CNNVD	Palo Alto Networks PAN-OS Security Vulnerability	13 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-6794 PAN-OS: File Upload Vulnerability in the Web Interface	13 Dec 202318:16	–	cvelist
EUVD	EUVD-2023-59005	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6794	13 Dec 202319:15	–	nvd
OSV	CVE-2023-6794	13 Dec 202319:15	–	osv
Palo Alto Networks	PAN-OS: File Upload Vulnerability in the Web Interface	13 Dec 202317:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS 8.1.x < 8.1.26 / 9.0.x < 9.0.17-h1 / 9.1.x < 9.1.14 Vulnerability	14 Dec 202300:00	–	nessus
Prion	Design/Logic Flaw	13 Dec 202319:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange8.1.0–8.1.26

paloaltonetworks pan-osRange9.0.0–9.0.17

paloaltonetworks pan-osRange9.1.0–9.1.14

[
  {
    "defaultStatus": "unaffected",
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "8.1.26",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.1.26",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.0.17-h1",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.17-h1",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.1.14",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.1.14",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      },
      {
        "lessThan": "All",
        "status": "unaffected",
        "version": "10.1",
        "versionType": "custom"
      },
      {
        "lessThan": "All",
        "status": "unaffected",
        "version": "10.2",
        "versionType": "custom"
      },
      {
        "lessThan": "All",
        "status": "unaffected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "All",
        "status": "unaffected",
        "version": "11.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2023-6794

21 Nov 2024 08:44Current

6Medium risk

Vulners AI Score6

CVSS 3.14.7 - 5.5

EPSS0.00087

CWE-434