This vulnerability (CWE-862) in Palo Alto Networks PAN-OS software enables an authenticated administrator with CLI access to escalate privileges to root level on affected devices including PA-Series, VM-Series firewalls, and Panorama (virtual and M-Series). The issue does not affect Cloud NGFW or Prisma Access. The vulnerability arises from missing authorization controls in the CLI interface. Palo Alto Networks recommends restricting CLI and management interface access to trusted administrators and IP addresses to mitigate risk. No official patch or remediation level has been published as of the data provided.

An authenticated administrator with CLI access can perform unauthorized actions with root privileges, potentially leading to full control over the affected device. This elevates the risk of unauthorized configuration changes or system compromise. The impact is mitigated if CLI access is tightly controlled and restricted to trusted administrators and IP addresses. Cloud NGFW and Prisma Access are not affected by this vulnerability.

No official patch or remediation has been confirmed. Palo Alto Networks recommends following best practice deployment guidelines by restricting CLI access to a limited group of administrators and limiting management interface access to trusted internal IP addresses. Monitor the vendor advisory for updates on patch availability and official fixes.