IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.8Kritisch KEV

CVE-2017-15944Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

paloaltonetworks pan-os Veröffentlicht: (vor 8 Jahren)

Bekannt ausgenutzt — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

CISA hat am 18.08.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 08.09.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://security.paloaltonetworks.com/CVE-2017-15944; https://nvd.nist.gov/vuln/detail/CVE-2017-15944

Beschreibung

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

Schwachstellentyp (CWE): CWE-20CWE-119

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
paloaltonetworks pan-os < 6.1.19

Referenzen und Patches

CPE-Treffer (NVD) (4)
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* < 6.1.19
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.19
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 7.1.0 < 7.1.14
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.6

Neue CVEs im selben Produkt — Palo Alto PAN-OS / GlobalProtect

1.3Niedrig
CVE-2026-0325

PAN-OS: GlobalProtect Authorization Bypass Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely…

1.7Niedrig
CVE-2026-0326

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

2.3Niedrig
CVE-2026-0327

PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not…

2.7Niedrig
CVE-2026-0328

PAN-OS: User Impersonation through GlobalProtect Portal

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and P…

4.6Mittel
CVE-2026-0329

PAN-OS: Buffer Overflow Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cl…

6.1Mittel
CVE-2026-0330

PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly…