CVE Catalog

CVE-2016-3655

Critical
Published: Translated: NVD NIST

Summary

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call.

Risk Assessment

This vulnerability may allow remote attackers to gain control over the operating system, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest version of PAN-OS to eliminate this vulnerability and secure the system against potential attacks.

Original NVD description (English source)

The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS