CVE-2017-15944

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2017-15944
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://www.securityfocus.com/bid/102079 Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/102079 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040007 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040007 Broken Link Third Party Advisory VDB Entry
https://security.paloaltonetworks.com/CVE-2017-15944 Vendor Advisory
https://security.paloaltonetworks.com/CVE-2017-15944 Vendor Advisory
https://www.exploit-db.com/exploits/43342/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43342/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/44597/ Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/44597/ Exploit Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
History

22 Jan 2025, 19:08

Type Values Removed Values Added
References (BID) http://www.securityfocus.com/bid/102079 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/102079 - Broken Link, Third Party Advisory, VDB Entry
References (CONFIRM) https://security.paloaltonetworks.com/CVE-2017-15944 - Vendor Advisory () https://security.paloaltonetworks.com/CVE-2017-15944 - Vendor Advisory
References (SECTRACK) http://www.securitytracker.com/id/1040007 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1040007 - Broken Link, Third Party Advisory, VDB Entry
References (EXPLOIT-DB) https://www.exploit-db.com/exploits/43342/ - Exploit, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/43342/ - Exploit, Third Party Advisory, VDB Entry
References (EXPLOIT-DB) https://www.exploit-db.com/exploits/44597/ - Exploit, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/44597/ - Exploit, Third Party Advisory, VDB Entry

28 Jun 2024, 14:08

Type Values Removed Values Added
References (CONFIRM) https://security.paloaltonetworks.com/CVE-2017-15944 - (CONFIRM) https://security.paloaltonetworks.com/CVE-2017-15944 - Vendor Advisory
References (BID) http://www.securityfocus.com/bid/102079 - Third Party Advisory, VDB Entry (BID) http://www.securityfocus.com/bid/102079 - Broken Link, Third Party Advisory, VDB Entry
References (EXPLOIT-DB) https://www.exploit-db.com/exploits/43342/ - Third Party Advisory, VDB Entry (EXPLOIT-DB) https://www.exploit-db.com/exploits/43342/ - Exploit, Third Party Advisory, VDB Entry
References (SECTRACK) http://www.securitytracker.com/id/1040007 - Third Party Advisory, VDB Entry (SECTRACK) http://www.securitytracker.com/id/1040007 - Broken Link, Third Party Advisory, VDB Entry
Information

Published : 2017-12-11 17:29

Updated : 2025-04-03 20:28

NVD link : CVE-2017-15944

Mitre link : CVE-2017-15944

JSON object : View

Products Affected

paloaltonetworks

  • pan-os
CWE
NVD-CWE-noinfo