The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7.
It is, therefore, affected by an OS Command Injection vulnerability in PAN-OS management server. An authenticated remote attacker can exploit this to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Palo Alto Networks PAN-OS 7.1.x < 8.1.13 / 9.0.x < 9.0.7 OS Command Injection

high Nessus Plugin ID 137900

No changelogs found