CVE-2017-15942
HighSummary
Palo Alto Networks PAN-OS versions before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allow remote attackers to cause a denial of service via vectors related to the management interface.
Risk Assessment
Attackers can exploit this vulnerability to disrupt system operations, potentially leading to service outages and loss of availability.
Recommendation
It is recommended to upgrade to the latest version of PAN-OS to eliminate this vulnerability and secure the system against potential attacks.
Other vulnerabilities in Palo Alto Networks PAN-OS
See all- CVE-2017-7218High
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
- CVE-2016-9151High
Palo Alto Networks PAN-OS versions before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allow local users to gain privileges via crafted values of unspecified environment variables.
- CVE-2016-1712High
Palo Alto Networks PAN-OS versions before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 may allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.
- CVE-2016-3654High
The device management command line interface (CLI) in Palo Alto Networks PAN-OS before version 5.0.18 and in versions 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.
- CVE-2026-0284Critical
An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information disclosure or corruption of internal LSVPN satellite data. Panorama, Cloud NGFW, and Prisma Access are not affected by this vulnerability.
- CVE-2024-3393HighActively exploited
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
- CVE-2024-3400CriticalActively exploited
In Palo Alto Networks PAN-OS GlobalProtect feature, a command injection vulnerability due to arbitrary file creation exists. An unauthenticated attacker can execute arbitrary code with root privileges on the firewall.
- CVE-2022-0028HighActively exploited
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The attack would appear to originate from a Palo Alto Networks PA-Series, VM-Series, or CN-Series firewall against an attacker-specified target. This requires a URL filtering profile with blocked categories assigned to a source zone with an external facing interface.
- CVE-2017-15940Critical
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
- CVE-2016-9150Critical
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before version 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code.
Original NVD description (English source)
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x before 8.0.6 allows remote attackers to cause a denial of service via vectors related to the management interface.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS