Palo Alto Networks PAN-OS Command Injection Vulnerability in the Management Web Interface

A command injection vulnerability exists in Palo Alto Networks PAN-OS, allowing an authenticated administrative user to execute actions as the root user. This vulnerability requires network access to the management web interface and successful authentication. It does not affect Cloud NGFW or Prisma Access.

Impact

Exploitation of this vulnerability allows for command injection, with the potential for privilege escalation to the root user.

Remediation

Users can upgrade to PAN-OS 11.0.3 or 10.2.8 or later. For PAN-OS 10.1, upgrade to 10.2.8 or 11.0.3 or later. Consult the Palo Alto Networks Customer Support Portal for guidance on securing management interface access.