漏洞描述 Palo Alto Networks UI管理界面在PAN-OS 10.1.14-h6, PAN-OS 10.2.12-h2, PAN-OS11.0.6-h1, PAN-OS 11.1.5-h1, PAN-OS 11.2.4-h1版本以下存在命令注入漏洞,其UI管理界面存在未授权命令注入漏洞。
相关漏洞推荐 (CVE-2025-4617)Palo Alto Networks Prisma Browser截图控制绕过漏洞 (CVE-2025-4618)Palo Alto Networks Prisma Browser敏感信息泄露漏洞 CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution POC CVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting POC CVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting POC CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution POC CVE-2023-20889: VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability POC CVE-2024-9463: PaloAlto Networks Expedition - Remote Code Execution POC CVE-2025-0107: Palo Alto Networks Expedition - OS Command Injection POC limit-networkaccess-disabled: Limit Network Access to Selected Networks - Disabled POC CVE-2022-22242: Juniper Networks Junos OS 错误页面反射 XSS 漏洞 POC CVE-2024-0012: Palo Alto Networks PAN-OS身份认证绕过导致RCE漏洞(CVE-2024-0012) POC versa-default-password: Versa Networks SD-WAN Application Default Login