Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-4230

🗓️ 12 Jun 2025 23:30:15Reported by palo_altoType 
cve
 cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 122 Views

Command injection in PAN-OS allows authenticated admin to execute commands as root user.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb		CVE-2025-4230
13 Jun 202500:15
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the command-line interface (CLI) of the PAN-OS operating system allows a hacker to bypass existing security restrictions and execute arbitrary commands.
18 Jun 202500:00
–bdu_fstec
circl
Circl		CVE-2025-4230
11 Jun 202514:00
–circl
cnnvd
CNNVD		Palo Alto Networks PAN-OS 操作系统命令注入漏洞
12 Jun 202500:00
–cnnvd
cvelist
Cvelist		CVE-2025-4230 PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI
12 Jun 202523:30
–cvelist
euvd
EUVD		EUVD-2025-18226
3 Oct 202520:07
–euvd
ncsc
NCSC		Vulnerabilities fixed in Palo Alto PAN OS
9 Jul 202508:33
–ncsc
nvd
NVD		CVE-2025-4230
13 Jun 202500:15
–nvd
paloalto
Palo Alto Networks		PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI
11 Jun 202516:00
–paloalto
nessus
Tenable Nessus		Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h15 / 10.2.x < 10.2.13-h7 / 11.1.x < 11.1.6-h14 / 11.2.x < 11.2.6 Vulnerability
11 Jun 202500:00
–nessus
Rows per page
Vulners
Node
OR
paloaltonetworkspan-osRange11.2.0–11.2.6
paloaltonetworkspan-osRange11.1.0–11.1.10
paloaltonetworkspan-osRange10.2.0–10.2.14
paloaltonetworkspan-osRange10.1.0–10.1.14
[
  {
    "defaultStatus": "unaffected",
    "product": "Cloud NGFW",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "6.3.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.3.3",
        "status": "unaffected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:11.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h14:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h13:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h11:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h10:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h9:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h8:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h7:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h6:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h5:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h4:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h3:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h2:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:h1:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.14:-:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.13:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.12:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.11:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.10:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.9:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.7:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.3:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:o:palo_alto_networks:pan-os:10.1.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "11.2.6",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.2.6",
        "status": "affected",
        "version": "11.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "11.1.10",
            "status": "unaffected"
          }
        ],
        "lessThan": "11.1.10",
        "status": "affected",
        "version": "11.1.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.2.14",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.2.14",
        "status": "affected",
        "version": "10.2.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.1.14-h15",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.1.14-h15",
        "status": "affected",
        "version": "10.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Prisma Access",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

MauriceTorres

𝐓𝐨𝐝𝐚𝐲'𝐬𝐏𝐚𝐭𝐜𝐡𝐓𝐮𝐞𝐬𝐝𝐚𝐲𝐨𝐯𝐞𝐫𝐯𝐢𝐞𝐰

dCypherIO

Palo Alto Networks fixed multiple privilege escalation flaws Palo Alto Networks has addressed multiple security flaws, including seven privilege escalation vulnerabilities and integrated 11 Chrome patches. The most severe issue, CVE-2025-4232 (CVSS 7.1), is a wildcard-based code injection in the GlobalProtect app on macOS, allowing local privilege escalation. Other vulnerabilities include authenticated admin command injection in PAN-OS via the web interface (CVE-2025-4231) and CLI (CVE-2025-4230). Additionally, CVE-2025-4228 exposes unencrypted SD-WAN data, and a Cortex XDR Broker VM bug also allowed root privilege escalation. Cloud NGFW and Prisma Access are unaffected. No exploitation in the wild has been reported, according to the company’s advisory. https://t.co/4LNyUHOwXS #Cybersecurity #PaloAlto #News #Update #Networks #Exploits

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:32Current
7.1High risk
Vulners AI Score7.1
CVSS 48.4
EPSS0.00623
SSVC
CWE-78
command injection vulnerabilitypalo alto networksauthenticated adminbypass restrictionsroot user access
122