CVE-2017-15944

Опубликовано: 11 дек. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Критический

Описание

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

Ссылки

http://www.securityfocus.com/bid/102079
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040007
Broken Link
Third Party Advisory
VDB Entry
https://security.paloaltonetworks.com/CVE-2017-15944
Vendor Advisory
https://www.exploit-db.com/exploits/43342/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/44597/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/102079
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040007
Broken Link
Third Party Advisory
VDB Entry
https://security.paloaltonetworks.com/CVE-2017-15944
Vendor Advisory
https://www.exploit-db.com/exploits/43342/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/44597/
Exploit
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-15944

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия до 6.1.19 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 7.0.0 (включая) до 7.0.19 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 7.1.0 (включая) до 7.1.14 (исключая)

cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Версия от 8.0.0 (включая) до 8.0.6 (исключая)

EPSS

Процентиль: 100%

0.94179

Критический

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-20

Связанные уязвимости

GHSA-9ppr-hv62-39w2

CVSS3: 9.8

github

больше 3 лет назад

EPSS

Процентиль: 100%

0.94179

Критический

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

CWE-20