Home

Description

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

PUBLISHED Reserved 2024-12-20 | Published 2025-04-11 | Updated 2025-04-11 | Assigner palo_alto




HIGH: 7.1CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status
unaffected

All (custom)
unaffected

Default status
unaffected

11.2.0 (custom)
unaffected

11.1.0 (custom)
unaffected

11.0.0 (custom) before 11.0.4
affected

10.2.0 (custom) before 10.2.9
affected

10.1.0 (custom) before 10.1.14-h13
affected

Default status
unaffected

All (custom)
unaffected

Timeline

2025-04-09:Initial Publication

Credits

Pavel Raunou finder

References

security.paloaltonetworks.com/CVE-2025-0127 vendor-advisory

cve.org (CVE-2025-0127)

nvd.nist.gov (CVE-2025-0127)

Download JSON