Skip to content
OpenAdvisories
High WID-SEC-2025-1313 3 CVEs

PaloAlto Networks PAN-OS: Mehrere Schwachstellen

Published Jun 11, 2025 · Updated Jun 11, 2025 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um Informationen offenzulegen, oder beliebigen Programmcode als "root" auszuführen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 3

  • High 8.4
    CVE-2025-4230

    PAN-OS: Authenticated Admin Command Injection Vulnerability Through CLI

    A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To be able to exploit this issue, the user must have access to the PAN-OS …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 7.1
    CVE-2025-4231

    PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

    A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user. The attacker must have network access to the management web interface and successfully authenticate to exploit th…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.0
    CVE-2025-4229

    PAN-OS: Traffic Information Disclosure Vulnerability

    An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept pack…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References