Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34595 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can execute arbitrary code as root using the device management command line interface. Ref 35249 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.8 and...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can inject commands as root on the device. Ref 31091 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.4 and earlier; PAN-OS 3.1.9 and earlier. Work...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34299 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can inject commands as root on the device. Ref 30088 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.3 and earlier; PAN-OS 3.1.9 and earlier. Work...

Verbose Error Messages

Under certain conditions, when unexpected input is provided to the web-based management UI, overly verbose error information is delivered back to the client. This does not directly result in any specific vulnerability, however this information is helpful to an attacker. Ref 33139 This issue resul...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can execute arbitrary code as root on the device. Ref 36983 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.3 and earlier; PAN-OS 4.0.9 and earlier;...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33476 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.0 an...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can inject commands as root on the device. Ref 30088 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.3 and earlier; PAN-OS 3.1.9 and earlier. Work...

OpenSSL Plain Text Recovery Attack Vulnerability

The OpenSSL library implementation is vulnerable to a plain text recovery attack by performing timing analysis of the time required to decrypt encrypted data. A detailed report of this issue is available at http://www.isg.rhul.ac.uk/kp/dtls.pdf. Ref 36017 This vulnerability can theoretically resu...

Management Server DOS Vulnerability

An issue exists whereby the management server of the device can be crashed when an authenticated users sends a specially crafted command via the command line interface. Ref 35254 This issue results in the unavailability of the management server of the device. The attacker must be an authenticated...

PT-2012-6294

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.8 and earlier Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute...

PT-2012-6290

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.11 and earlier Palo Alto Networks PAN-OS versions 4.0.9 and earlier Palo Alto Networks PAN-OS versions 4.1.3 and earlier Description A vulnerability exists in the device-management command-line interface,...

PT-2012-6284

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.8 PAN-OS versions 4.1.0 through 4.1.1 Description A vulnerability exists in the device-management command-line...

PT-2012-6281

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.4 and earlier Description A vulnerability exists that allows an unauthenticated user to inject commands as root on the device, resulting in arbitrary...

PT-2012-6289

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.8 PAN-OS versions 4.1.0 through 4.1.1 Description The device-management command-line interface allows remote...

PT-2012-6292

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.11 and earlier Palo Alto Networks PAN-OS versions 4.0.9 and earlier Palo Alto Networks PAN-OS versions 4.1.3 and earlier Description A vulnerability exists in the web management UI, allowing remote...

PT-2012-6283

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.7 and earlier Palo Alto Networks PAN-OS versions 4.1.0 and earlier Description A vulnerability exists in the device-management command-line interface,...

PT-2012-6288

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.7 PAN-OS versions 4.1.0 Description A vulnerability exists in the device-management command-line interface, allowin...

PT-2012-6282

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.3 and earlier Description A vulnerability exists that allows an unauthenticated user to inject commands as root on the device, resulting in arbitrary...