Palo Alto Networks PAN-OS Improper Input Neutralization Vulnerability in Management Web Interface Allowing Command Execution

A vulnerability allowing improper input neutralization has been identified in the management web interface of Palo Alto Networks PAN-OS software. This vulnerability enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk is notably reduced when CLI access is limited to a select group of administrators. It is important to note that this vulnerability does not affect Cloud NGFW or Prisma Access.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the affected system.