CVE-2023-6792

Summary

CVE-2023-6792 is a newly disclosed vulnerability affecting the XML API of Palo Alto Networks PAN-OS software. This OS command injection flaw allows authenticated API users to inject and execute malicious commands, potentially disrupting system processes and executing arbitrary code on the firewall with limited privileges. Attackers could exploit this weakness to gain unauthorized access or disrupt network traffic, posing a significant risk to organizations using the affected software. It is recommended that users upgrade to the latest version of PAN-OS to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.