CVE-2025-4230 | THREATINT

Description

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS CLI. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Reserved 2025-05-02 | Published 2025-06-12 | Updated 2025-06-13 | Assigner palo_alto

HIGH: 8.4CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/R:U/V:D/U:Amber

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status

unaffected

All before 6.3.3

unaffected

Default status

unaffected

11.2.0 before 11.2.6

affected

11.1.0 before 11.1.10

affected

10.2.0 before 10.2.14

affected

10.1.0 before 10.1.14-h15

affected

Default status

unaffected

All

unaffected

Timeline

2025-06-11:

Initial Publication

Credits

Visa Inc. finder

References

security.paloaltonetworks.com/CVE-2025-4230 vendor-advisory

cve.org (CVE-2025-4230)

nvd.nist.gov (CVE-2025-4230)

Download JSON