title: PAN-OS: Remote code execution vulnerability in the PAN-OS SSH device management interface
description: A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root access to PAN-OS. This issue affects PAN-OS 7.1 versions prior to 7.1.24-h1, 7.1.25; 8.0 versions prior to 8.0.19-h1, 8.0.20; 8.1 versions prior to 8.1.9-h4, 8.1.10; 9.0 versions prior to 9.0.3-h3, 9.0.4.
problem types: CWE-78 OS Command Injection
affected:
{
product: PAN-OS
vendor: Palo Alto Networks
versions:
lessThan: 7.1.24-h1, 7.1.25, status: affected, version: 7.1, versionType: custom
lessThan: 8.0.19-h1, 8.0.20, status: affected, version: 8.0, versionType: custom
lessThan: 8.1.9-h4, 8.1.10, status: affected, version: 8.1, versionType: custom
lessThan: 9.0.3-h3, 9.0.4, status: affected, version: 9.0, versionType: custom
lessThanOrEqual: 7.0, status: unknown, version: all, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: This issue has been resolved in PAN-OS 7.1.24-h1 and later, PAN-OS 8.0.19-h1 and later, PAN-OS 8.1.9-h4 and later, and PAN-OS 9.0.3-h3 and later.
workarounds: This issue affects the SSH management interface of PAN-OS and is strongly mitigated by following best practices for securing the PAN-OS management interfaces. Our best practices guidelines reduce the exposure of device management interfaces to potential attacker.