IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
9.8Critical KEV

CVE-2017-15944Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

paloaltonetworks pan-os Published: (8 years ago)

Known exploited — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

CISA confirmed this vulnerability is used in real attacks on 18.08.2022. Remediation deadline for US federal agencies: 08.09.2022.

Required action: Apply updates per vendor instructions. https://security.paloaltonetworks.com/CVE-2017-15944; https://nvd.nist.gov/vuln/detail/CVE-2017-15944

Description

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

Weakness (CWE): CWE-20CWE-119

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
paloaltonetworks pan-os < 6.1.19

References and patches

CPE matches (NVD) (4)
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* < 6.1.19
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.19
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 7.1.0 < 7.1.14
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 8.0.0 < 8.0.6

Recent CVEs in the same product — Palo Alto PAN-OS / GlobalProtect

1.3Low
CVE-2026-0325

PAN-OS: GlobalProtect Authorization Bypass Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated attacker with valid GlobalProtect credentials to bypass IP address restrictions and circumvent network access controls that rely…

1.7Low
CVE-2026-0326

PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability.

2.3Low
CVE-2026-0327

PAN-OS: Privilege Escalation Vulnerability in GlobalProtect

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an authenticated, lower-privileged user to obtain the privileges and configuration of a higher-privileged user. Cloud NGFW and Panorama are not…

2.7Low
CVE-2026-0328

PAN-OS: User Impersonation through GlobalProtect Portal

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software enables an unauthenticated user to bypass security restrictions and establish an unauthorized VPN connection. Panorama, Cloud NGFW, and P…

4.6Medium
CVE-2026-0329

PAN-OS: Buffer Overflow Vulnerability

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through a dataplane interface. Cl…

6.1Medium
CVE-2026-0330

PAN-OS: Authenticated Remote Code Execution (RCE) in Panorama

Palo Alto Networks Cloud NGFW; Palo Alto Networks PAN-OS; Palo Alto Networks Prisma Access

A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated administrator with network access to execute arbitrary code with root privileges. The security risk posed by this issue is significantly…