CVE-2025-0127 | THREATINT

Description

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Reserved 2024-12-20 | Published 2025-04-11 | Updated 2025-04-11 | Assigner palo_alto

HIGH: 7.1CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

All

unaffected

Default status

unaffected

11.2.0

unaffected

11.1.0

unaffected

11.0.0 before 11.0.4

affected

10.2.0 before 10.2.9

affected

10.1.0 before 10.1.14-h13

affected

Default status

unaffected

All

unaffected

Timeline

2025-04-09:

Initial Publication

Credits

Pavel Raunou finder

References

security.paloaltonetworks.com/CVE-2025-0127 vendor-advisory

cve.org (CVE-2025-0127)

nvd.nist.gov (CVE-2025-0127)

Download JSON