CVE-2023-6792

MEDIUM

Paloaltonetworks Pan-os < 8.1.24 - Command Injection

Title source: rule

Description

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API user to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

References (1)

[Vendor Advisory] https://security.paloaltonetworks.com/CVE-2023-6792

Scores

CVSS v3 5.5

EPSS 0.0020

EPSS Percentile 41.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Classification

CWE

CWE-78 CWE-88

Status published

Affected Products (1)

paloaltonetworks/pan-os < 8.1.24

Timeline

Published Dec 13, 2023

Tracked Since Feb 18, 2026