HIGH · 9.0

CVE-2012-6600

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vect...

Vulnerability Description

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 34502.

CVSS Score

9.0

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
PaloaltonetworksPan-Os4.0.0

Related Weaknesses (CWE)

References

FAQ

What is CVE-2012-6600?

CVE-2012-6600 is a vulnerability with a CVSS score of 9.0 (HIGH). The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated users to execute arbitrary commands via unspecified vect...

How severe is CVE-2012-6600?

CVE-2012-6600 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-6600?

Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Pan-Os.