Vulnerabilities > CVE-2024-8688 - Unspecified vulnerability in Paloaltonetworks Pan-Os

CVSS 4.4 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

paloaltonetworks

NVD

Published: 2024-09-11

Updated: 2024-10-03

Summary

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only administrators) with access to the CLI to to read arbitrary files on the firewall.

Vulnerable Configurations

Part	Description	Count
OS	Paloaltonetworks Paloaltonetworks PAN OS 10.0.0 Paloaltonetworks PAN OS 10.0.1 Paloaltonetworks PAN OS 10.0.2 Paloaltonetworks PAN OS 10.0.3 Paloaltonetworks PAN OS 10.0.4 Paloaltonetworks PAN OS 10.0.5 Paloaltonetworks PAN OS 10.0.6 Paloaltonetworks PAN OS 10.0.7 Paloaltonetworks PAN OS 10.0.8 Paloaltonetworks PAN OS 10.0.9 Paloaltonetworks PAN OS 9.1.0 Paloaltonetworks PAN OS 9.1.1 Paloaltonetworks PAN OS 9.1.2 Paloaltonetworks PAN OS 9.1.3 Paloaltonetworks PAN OS 9.1.4 Paloaltonetworks PAN OS 9.1.5 Paloaltonetworks PAN OS 9.1.6 Paloaltonetworks PAN OS 9.1.9 Paloaltonetworks PAN OS 9.1.10 Paloaltonetworks PAN OS 9.1.11 Paloaltonetworks PAN OS 9.1.12 Paloaltonetworks PAN OS 9.1.13 Paloaltonetworks PAN OS 9.1.14 Paloaltonetworks PAN OS 10.1.0	24

References

https://security.paloaltonetworks.com/CVE-2024-8688