Vulnerability Details : CVE-2012-6601
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.
Vulnerability category: Execute code
Products affected by CVE-2012-6601
- cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:3.1.9:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.8:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:3.1.10:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.1.3:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-6601
0.88%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-6601
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2012-6601
-
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-6601
-
https://security.paloaltonetworks.com/CVE-2012-6601
CVE-2012-6601 Command Injection Vulnerability
Jump to