Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2025-4231

CVE-2025-4231

HIGH8.6

PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

Published Jun 12, 2025

Modified 6 days ago

Fix available

Details

A command injection vulnerability in Palo Alto Networks PAN-OS® enables an authenticated administrative user to perform actions as the root user.

The attacker must have network access to the management web interface and successfully authenticate to exploit this issue.

Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Affected Packages

PAN-OS

PANOS

Affected versions:

10.1.0

Fixed in:

10.2.811.0.3

References

ADVISORY

https://security.paloaltonetworks.com/CVE-2025-4231

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-4231

CVSS Analysis

CVSS v4.0

7.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Attack Requirements

PresentAT:P

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

HighVC:H

Vuln. Integrity

HighVI:H

Vuln. Availability

HighVA:H

Subsequent System

Subseq. Confidentiality

LowSC:L

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

7.1/CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber

Weakness Type (CWE)

Input Validation

CWE-77

Command Injection

Ecosystems

PANOS

Timeline

PublishedJun 12, 2025

ModifiedFeb 26, 2026

CVE-2025-4231 | Mondoo Vulnerability Intelligence