Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

The Palo Alto Networks PAN-OS running on the remote host is affected by a remote code execution vulnerability in the management interface due to improper validation of user-supplied input when handling HTTP requests. An unauthenticated, remote attacker can exploit this, via a series of specially crafted requests, to cause remote code execution in the context of the highest privileged user. 

Note that PAN-OS is reportedly affected by other vulnerabilities as well; however, Nessus has not tested for these.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.14. It is, therefore, affected by multiple vulnerabilities.

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.19. It is, therefore, affected by multiple vulnerabilities.

The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x prior to 6.1.19. It is, therefore, affected by multiple vulnerabilities.

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
105376	Palo Alto Networks PAN-OS Management Interface RCE (PAN-SA-2017-0027)	Nessus	CGI abuses	critical
105298	Palo Alto Networks PAN-OS 7.1.x < 7.1.14 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical
105296	Palo Alto Networks PAN-OS 7.0.x < 7.0.19 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical
105295	Palo Alto Networks PAN-OS 6.1.x < 6.1.19 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical
104811	Palo Alto Networks PAN-OS 8.0.x < 8.0.6 Multiple Vulnerabilities	Nessus	Palo Alto Local Security Checks	critical

Detections

Analytics

CVE-2017-15944

critical

Tenable Plugins

critical

critical

critical

critical

critical