CVE-2023-6794

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2023-12-13

Last modified

2024-08-02

Weaknesses

CWE-434

Affected products

• Cloud Ngfw (Palo Alto Networks)
• Pan-os (Palo Alto Networks)
• Prisma Access (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2023-6794