CVE-2017-15944
Published 2017-12-11 · Updated 2026-06-17 · Source cve@mitre.org
Summary
CVE-2017-15944 is a critical-severity (CVSS 9.8) vulnerability in Palo Alto Networks PAN-OS. CISA added it to the Known Exploited Vulnerabilities catalog on August 18, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by September 8, 2022. CISA does not currently list it as used in ransomware campaigns. Palo Alto Networks has 16 vulnerabilities in the KEV catalog, 6 of them linked to ransomware.
All 16 known-exploited Palo Alto Networks vulnerabilities →Description
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Palo Alto Networks — PAN-OS
Name: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Date added: 2022-08-18 · Due: 2022-09-08
Required action: Apply updates per vendor instructions.
References
- http://www.securityfocus.com/bid/102079
- http://www.securitytracker.com/id/1040007
- https://security.paloaltonetworks.com/CVE-2017-15944
- https://www.exploit-db.com/exploits/43342/
- https://www.exploit-db.com/exploits/44597/
- http://www.securityfocus.com/bid/102079
- http://www.securitytracker.com/id/1040007
- https://security.paloaltonetworks.com/CVE-2017-15944