The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.0.6-h3. It is, therefore, affected by an unspecified flaw in the web interface packet capture management that allows an authenticated user to inject arbitrary commands.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.14. It is, therefore, affected by multiple vulnerabilities.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.19. It is, therefore, affected by multiple vulnerabilities.

The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x prior to 6.1.19. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
105299	Palo Alto Networks PAN-OS 8.0.x < 8.0.6-h3 Web Interface Packet Capture Management Unspecified Remote Command Injection	Nessus	Palo Alto Local Security Checks	critical
105298	Palo Alto Networks PAN-OS 7.1.x < 7.1.14 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical
105296	Palo Alto Networks PAN-OS 7.0.x < 7.0.19 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical
105295	Palo Alto Networks PAN-OS 6.1.x < 6.1.19 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical

Detections

Analytics

CVE-2017-15940

critical

Tenable Plugins

critical

critical

critical

critical