PAN-OS: File Upload Vulnerability in the Web Interface

CVE-2023-6794

5.5MEDIUM

Key Information

Vendor: Palo Alto Networks
Status: PAN-OS; Prisma Access; Cloud NGFW
Vendor: CVE Published:; 13 December 2023

Summary

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Affected Version(s)

PAN-OS < 8.1.26

PAN-OS < 9.0.17-h1

PAN-OS < 9.1.14

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

High

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability Reserved.
Dec 13, 2023
Vulnerability published.
Dec 13, 2023

Collectors

NVD DatabaseMitre Database