CVE-2012-6593
CVE-2012-6593 is a critical-severity vulnerability in Paloaltonetworks Pan-os with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-78.
Key facts
- Severity: Critical (CVSS 2.0 base score 10.0)
- EPSS exploit prediction: 4% (90th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-78
- Affected product: Paloaltonetworks Pan-os
- Published:
- Last modified:
Description
Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
Frequently asked questions
- What is CVE-2012-6593?
- Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088.
- How severe is CVE-2012-6593?
- CVE-2012-6593 has a CVSS 2.0 base score of 10.0, rated critical severity.
- Is CVE-2012-6593 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2012-6593?
- CVE-2012-6593 primarily affects Paloaltonetworks Pan-os. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2012-6593?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- When was CVE-2012-6593 published?
- CVE-2012-6593 was published on 2013-08-31 and last updated on 2026-06-16.
References
Affected products (5)
- cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:4.0.3:*:*:*:*:*:*:*
More vulnerabilities in Paloaltonetworks Pan-os
- CVE-2024-3400 — Critical (CVSS 10.0): A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto…
- CVE-2020-2021 — Critical (CVSS 10.0): When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider…
- CVE-2019-17440 — Critical (CVSS 10.0): Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation…
- CVE-2012-6603 — Critical (CVSS 10.0): The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows…
- CVE-2012-6601 — Critical (CVSS 10.0): The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x…
- CVE-2012-6592 — Critical (CVSS 10.0): Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5 allows remote attackers to execute arbitrary commands…
All CVEs affecting Paloaltonetworks Pan-os →
Other CWE-78 (OS Command Injection) vulnerabilities
- CVE-2026-100382 — Critical (CVSS 10.0): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia…
- CVE-2026-77521 — Critical (CVSS 10.0): MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.5-lts, assistants with a tool, MCP tool,…
- CVE-2026-82004 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…
- CVE-2026-76197 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…
- CVE-2026-76195 — Critical (CVSS 10.0): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…
- CVE-2026-19188 — Critical (CVSS 10.0): A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product. The…