CVE-2025-0127

N/A

Descricao

A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deployed. Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado4/11/2025

Ultima modificacao4/11/2025

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-78

Referencias

https://security.paloaltonetworks.com/CVE-2025-0127(psirt@paloaltonetworks.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.