CVE-2012-6603: Palo Alto Networks PAN-OS

High severity, CVSS 10.0. EPSS: 4.4% chance of exploitation in the next 30 days.

The web management UI in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors, aka Ref ID 37034.

Affected products

• Palo Alto Networks PAN-OS: up to and including 3.1.11; version 3.1.9 only; version 3.1.10 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; …

Published 2013-08-31. Last modified 2026-06-16.