The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.12 / 4.0.10 / 4.1.4. It is, therefore, affected by multiple vulnerabilities :

  - A vulnerability exists that allows an unauthenticated     user to inject commands as root on the device.
    (CVE-2012-6601 / PAN-SA-2012-0012)

  - A vulnerability exists that allows an unauthenticated     user to gain administrator access without supplying     credentials. (CVE-2012-6603 / PAN-SA-2012-0014)

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8 / 4.1.1. It is, therefore, affected by a command injection vulnerability that allows an authenticated user to inject arbitrary shell commands via the CLI.

Note that the 3.0 branch is not affected by this vulnerability.

The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.11 / 4.0.9. It is, therefore, affected by multiple vulnerabilities :

  - A denial of service vulnerability exists that allows an     authenticated attacker to crash the device via a     specially crafted command sent to the CLI.
    (CVE-2012-6597 / PAN-SA-2012-0008)

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6604 / PAN-SA-2012-0015)

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6605 / PAN-SA-2012-0016)

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.3. It is, therefore, affected by an information disclosure vulnerability due to LDAP bind passwords being logged in plaintext when using default logging settings.

Note that the 3.1 branch is not affected by this vulnerability.

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.2.  It is, therefore, affected by multiple command injection vulnerabilities :

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6595 / PAN-SA-2012-0006)

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6600 / PAN-SA-2012-0011)

Note that the 3.0 branch is not affected by these vulnerabilities.

The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.11 / 4.0.8 / 4.1.1. It is, therefore, affected by a command injection vulnerability that allows an authenticated user to inject arbitrary shell commands via the CLI.

The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.10 / 4.0.4. It is, therefore, affected by multiple command injection vulnerabilities :

  - A vulnerability exists that allows an unauthenticated     user to inject commands as root on the device.
    (CVE-2012-6593 / PAN-SA-2012-0004)

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6602 / PAN-SA-2012-0013)

The remote host is running a version of Palo Alto Networks PAN-OS prior to 3.1.10 / 4.0.5. It is, therefore, affected by multiple command injection vulnerabilities :

  - A vulnerability exists that allows an authenticated user     to inject arbitrary shell commands via the CLI.
    (CVE-2012-6591 / PAN-SA-2012-0002)

  - A vulnerability exists that allows an unauthenticated     user to inject commands as root on the device.
    (CVE-2012-6592 / PAN-SA-2012-0003)

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to     overly verbose error messages. An attacker can exploit     this vulnerability by sending specially crafted input in     order to gain access to potentially sensitive     information. (CVE-2012-6590 / PAN-SA-2012-0001)

  - A vulnerability exists that potentially allows an     authenticated user to inject arbitrary shell commands     via the CLI. (CVE-2012-6598 / PAN-SA-2012-0009)

Note that the 3.0 branch is not affected by these vulnerabilities.

ID	Name	Severity
72825	Palo Alto Networks PAN-OS < 3.1.12 / 4.0.x < 4.0.10 / 4.1.x < 4.1.4 Multiple Vulnerabilities	critical
72824	Palo Alto Networks PAN-OS < 4.0.8 / 4.1.x < 4.1.1 Command Injection	high
72823	Palo Alto Networks PAN-OS < 3.1.11 / 4.0.x < 4.0.9 Multiple Vulnerabilities	high
72822	Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.3 Information Disclosure	medium
72821	Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.2 Multiple Command Injections	high
72820	Palo Alto Networks PAN-OS < 3.1.11 / 4.0.x < 4.0.8 / 4.1.x < 4.1.1 Command Injection	high
72819	Palo Alto Networks PAN-OS < 3.1.10 / 4.x < 4.0.4 Multiple Command Injections	critical
72818	Palo Alto Networks PAN-OS 3.1.10 / 4.x < 4.0.5 Multiple Command Injections	critical
72817	Palo Alto Networks PAN-OS < 4.0.8 Multiple Vulnerabilities	high

Detections

Analytics

Palo Alto Local Security Checks Family for Nessus

critical

high

high

medium

high

high

critical

critical

high