Lucene search
HistoryJul 12, 2023 - 5:15 p.m.
CVE-2023-38046
palo alto networks
vulnerability
pan-os
admin
local files
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
32.1%
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
Affected configurations
Node
paloaltonetworkspan-osRange10.2.0–10.2.4
ORpaloaltonetworkspan-osMatch11.0.0
Related
nessus
nessus
cvelist
cvelist
paloalto
paloalto
PAN-OS: Read System Files and Resources During Configuration Commit
2023-07-12 16:00:00
cve
cve
CVE-2023-38046
2023-07-12 17:15:08
prion
prion
Code injection
2023-07-12 17:15:00
ics
ics
Siemens RUGGEDCOM APE1808 before V11.0.1
2024-04-11 12:00:00
4.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
32.1%
Related for NVD:CVE-2023-38046