Description
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Cloud NGFW | Palo Alto Networks / Cloud NGFW | All | unaffected |
| pan-os | paloaltonetworks / pan-os | >= 10.1.0, < 10.1.14-h6 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.1.0, < 10.1.14-h6 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.1.0, < 10.1.14-h6 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.1.0, < 10.1.14-h6 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.1.0, < 10.1.14-h6 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.2.0, < 10.2.12-h2 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.2.0, < 10.2.12-h2 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.2.0, < 10.2.12-h2 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.2.0, < 10.2.12-h2 | affected |
| pan-os | paloaltonetworks / pan-os | >= 10.2.0, < 10.2.12-h2 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.0.0, < 11.0.6-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.0.0, < 11.0.6-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.0.0, < 11.0.6-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.0.0, < 11.0.6-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.0.0, < 11.0.6-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.1.0, < 11.1.5-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.1.0, < 11.1.5-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.1.0, < 11.1.5-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.1.0, < 11.1.5-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.1.0, < 11.1.5-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.2.0, < 11.2.4-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.2.0, < 11.2.4-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.2.0, < 11.2.4-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.2.0, < 11.2.4-h1 | affected |
| pan-os | paloaltonetworks / pan-os | >= 11.2.0, < 11.2.4-h1 | affected |
| PAN-OS | Palo Alto Networks / PAN-OS | >= 10.1.0, < 10.1.14-h6 | affected |
| PAN-OS | Palo Alto Networks / PAN-OS | >= 10.2.0, < 10.2.12-h2 | affected |
| PAN-OS | Palo Alto Networks / PAN-OS | >= 11.0.0, < 11.0.6-h1 | affected |
| PAN-OS | Palo Alto Networks / PAN-OS | >= 11.1.0, < 11.1.5-h1 | affected |
| PAN-OS | Palo Alto Networks / PAN-OS | >= 11.2.0, < 11.2.4-h1 | affected |
| Prisma Access | Palo Alto Networks / Prisma Access | All | unaffected |