CyberSec.Space Logo
Back to CVE Browser

CVE-2012-6601

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1810%
EPSS Percentile20.21th
PublishedAug 31, 2013
Last ModifiedApr 29, 2026

Vulnerability Description

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983.

Affected Platforms (CPE)

💻
Paloaltonetworks

Pan Os

<= 3.1.11
💻
Paloaltonetworks

Pan Os

= 3.1.9
💻
Paloaltonetworks

Pan Os

= 3.1.10
💻
Paloaltonetworks

Pan Os

= 4.0.0
💻
Paloaltonetworks

Pan Os

= 4.0.1
💻
Paloaltonetworks

Pan Os

= 4.0.2
💻
Paloaltonetworks

Pan Os

= 4.0.3
💻
Paloaltonetworks

Pan Os

= 4.0.4
💻
Paloaltonetworks

Pan Os

= 4.0.5
💻
Paloaltonetworks

Pan Os

= 4.0.6
💻
Paloaltonetworks

Pan Os

= 4.0.7
💻
Paloaltonetworks

Pan Os

= 4.0.8
💻
Paloaltonetworks

Pan Os

= 4.1.0
💻
Paloaltonetworks

Pan Os

= 4.1.1
💻
Paloaltonetworks

Pan Os

= 4.1.2
💻
Paloaltonetworks

Pan Os

= 4.1.3

References & Advisories

🔗 https://security.paloaltonetworks.com/CVE-2012-6601
🔗 https://security.paloaltonetworks.com/CVE-2012-6601

Related Vulnerabilities

CVE-2020-202110.0

When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option i...

CVE-2012-659210.0

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands via unspecifi...

CVE-2019-1744010.0

Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Manage...

CVE-2012-659310.0

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecifi...