CVE-2023-6795

published 2023-12-13

CVE-2023-6795: An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially…

Priority P4 32 medium 4.7 CVSS 3.1

AV N AC L PR H UI N S U C L I L A L

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Affected

13 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	pan-os	>= 10.0 < 10.0.9	10.0.9
palo_alto_networks	pan-os	>= 10.1 < 10.1.3	10.1.3
palo_alto_networks	pan-os	>= 8.1 < 8.1.24-h1	8.1.24-h1
palo_alto_networks	pan-os	>= 9.0 < 9.0.17	9.0.17
palo_alto_networks	pan-os	>= 9.1 < 9.1.12	9.1.12
paloalto	cloud_ngfw	—	—
paloalto	pan-os	—	—
paloalto	prisma_access	—	—
paloaltonetworks	pan-os	>= 10.0.0 < 10.0.9	10.0.9
paloaltonetworks	pan-os	>= 10.1.0 < 10.1.3	10.1.3
paloaltonetworks	pan-os	>= 8.1.0 < 8.1.24	8.1.24
paloaltonetworks	pan-os	>= 9.0.0 < 9.0.17	9.0.17
paloaltonetworks	pan-os	>= 9.1.0 < 9.1.12	9.1.12

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78