High severity8.8NVD Advisory· Published Aug 11, 2021· Updated Jun 17, 2026
CVE-2021-3050
CVE-2021-3050
Description
An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10; PAN-OS 10.0 version 10.0.7 and earlier PAN-OS 10.0 versions; PAN-OS 10.1 version 10.1.0 through PAN-OS 10.1.1. Prisma Access firewalls and firewalls running PAN-OS 8.1 versions are not impacted by this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
39.0.10+ 2 more
- (no CPE)range: 9.0.10
- (no CPE)range: 9.0.10 through 9.0.14, 9.1.4 through 9.1.10, 10.0.7 and earlier, 10.1.0 through 10.1.1
- cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=9.0.0,<9.0.15
Patches
Vulnerability mechanics
References
1- security.paloaltonetworks.com/CVE-2021-3050nvdVendor Advisory
News mentions
0No linked articles in our index yet.