CVE-2023-38046
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A vulnerability exists in Palo Alto Networks PAN-OS software that allows an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
Risk Assessment
This vulnerability could lead to unauthorized access to sensitive data on the system, posing a significant security risk to the organization.
Recommendation
It is recommended to limit administrator privileges and monitor system configurations to minimize the risk of exploitation of this vulnerability.
Other vulnerabilities in Palo Alto Networks PAN-OS
See all- CVE-2017-15942High
Palo Alto Networks PAN-OS versions before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allow remote attackers to cause a denial of service via vectors related to the management interface.
- CVE-2017-7218High
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
- CVE-2016-9151High
Palo Alto Networks PAN-OS versions before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allow local users to gain privileges via crafted values of unspecified environment variables.
- CVE-2016-1712High
Palo Alto Networks PAN-OS versions before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 may allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.
- CVE-2016-3654High
The device management command line interface (CLI) in Palo Alto Networks PAN-OS before version 5.0.18 and in versions 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.
- CVE-2026-0284Critical
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma Access are not affected by this vulnerability.
- CVE-2024-3393HighActively exploited
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
- CVE-2024-3400CriticalActively exploited
In Palo Alto Networks PAN-OS GlobalProtect feature, a command injection vulnerability due to arbitrary file creation exists. An unauthenticated attacker can execute arbitrary code with root privileges on the firewall.
- CVE-2022-0028HighActively exploited
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The attack would appear to originate from a Palo Alto Networks PA-Series, VM-Series, or CN-Series firewall against an attacker-specified target. This requires a URL filtering profile with blocked categories assigned to a source zone with an external facing interface.
- CVE-2017-15940Critical
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Original NVD description (English source)
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS