Suraj Siddharudh

**Name of the Vulnerable Software and Affected Versions** PAN-OS (affected versions not specified) **Description** A remote code execution (RCE) issue in the management interface allows an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. This affects PA-Series and VM-Series firewalls, as well as Panorama virtual and M-Series. Real-world incidents have been reported where attackers are actively exploiting this flaw. **Recommendations** Restrict access to the management interface to only trusted internal IP addresses. Enable Threat ID 510046 and 510047 from Applications and Threats content version 9159-10287 and later.