CVE-2021-3045: An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file…

PriorityP429medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.79%

51.7th percentile

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10. PAN-OS 10.0 and later versions are not impacted.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	pan-os	>= 8.1 < 8.1.19	8.1.19
palo_alto_networks	pan-os	>= 9.0 < 9.0.14	9.0.14
palo_alto_networks	pan-os	>= 9.1 < 9.1.10	9.1.10
paloalto	pan-os	—	—
paloaltonetworks	pan-os	>= 8.1.0 < 8.1.19	8.1.19
paloaltonetworks	pan-os	>= 9.0.0 < 9.0.14	9.0.14
paloaltonetworks	pan-os	>= 9.1.0 < 9.1.10	9.1.10

CVSS provenance

nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.