First published: Sat Aug 31 2013(Updated: )
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Palo Alto Networks PAN-OS | =4.0.0 | |
Palo Alto Networks PAN-OS | =4.0.1 | |
Palo Alto Networks PAN-OS | =4.0.2 | |
Palo Alto Networks PAN-OS | =4.0.3 | |
Palo Alto Networks PAN-OS | =4.0.4 | |
Palo Alto Networks PAN-OS | =4.0.5 | |
Palo Alto Networks PAN-OS | =4.0.6 | |
Palo Alto Networks PAN-OS | =4.0.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-6598 is considered a high severity vulnerability due to its potential for remote command execution.
To fix CVE-2012-6598, upgrade to Palo Alto Networks PAN-OS version 4.0.8 or later.
CVE-2012-6598 affects Palo Alto Networks PAN-OS versions 4.0.0 through 4.0.7.
Yes, CVE-2012-6598 can be exploited by remote authenticated users to execute arbitrary commands.
CVE-2012-6598 is a command injection vulnerability found in the device-management command-line interface.