Product:
PAN-OS
Summary
An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and execute arbitrary commands. The security risk posed by this issue is significantly minimized when CLI access is restricted to a limited group of administrators. Cloud NGFW and Prisma Access are not affected by this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-4615 |
Exploitation
To exploit this vulnerability, an authenticated administrator can leverage the improper input neutralization in the management web interface to bypass system restrictions. This allows the attacker to execute arbitrary commands on the system, potentially leading to unauthorized access or control over the affected system.
Affected Products
- PAN-OS: Vulnerable due to improper input neutralization in the management web interface.
Mitigation
To mitigate this vulnerability, it is recommended to restrict CLI access to a limited group of trusted administrators. Regularly review and update access controls to ensure that only authorized personnel have administrative privileges. Additionally, keep the software updated to the latest version to benefit from security patches.