Lucene search
Palo Alto Networks Product Security Incident Response TeamPA-CVE-2024-8686HistorySep 11, 2024 - 4:00 p.m.
PAN-OS: Command Injection Vulnerability
2024-09-1116:00:00
Palo Alto Networks Product Security Incident Response Team
securityadvisories.paloaltonetworks.com
2
command injection
vulnerability
palo alto networks
pan-os
administrator
firewall
CVSS4
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/AU:N/U:Amber/R:U/V:C/RE:M
AI Score
7.5
Confidence
Low
EPSS
0
Percentile
10.2%
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.
Work around:
No work around available.
Affected configurations
Node
softwarepan-os
Related
nvd
nvd
CVE-2024-8686
2024-09-11 17:15:14
nessus
nessus
Palo Alto Networks PAN-OS 11.2.x < 11.2.3 Vulnerability
2024-09-11 00:00:00
cvelist
cvelist
CVE-2024-8686 PAN-OS: Command Injection Vulnerability
2024-09-11 16:34:21
vulnrichment
vulnrichment
CVE-2024-8686 PAN-OS: Command Injection Vulnerability
2024-09-11 16:34:21
cve
cve
CVE-2024-8686
2024-09-11 17:15:14
CVSS4
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N/AU:N/U:Amber/R:U/V:C/RE:M
AI Score
7.5
Confidence
Low
EPSS
0
Percentile
10.2%
Related for PA-CVE-2024-8686