Actively exploited · Published Dec 11, 2017 · Assigned by mitre

CVE-2017-15944

Critical 9.8 Exploited

In plain English

A critical-severity improper input validation in PAN-OS from Palo Alto Networks. Attackers are actively exploiting it in the wild (listed by CISA on August 18, 2022). The chance it is exploited in the next 30 days is estimated at 98.3% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)98.3%top 0.1% of all CVEs

Exploited in the wildYesCISA KEV since Aug 18, 2022

Attack tooling3Metasploit, Nuclei, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Sep 8, 2022.

Official description

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-20, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

44597 exploit, x_refsource_EXPLOIT-DB
1040007 vdb-entry, x_refsource_SECTRACK
102079 vdb-entry, x_refsource_BID
43342 exploit, x_refsource_EXPLOIT-DB
https://security.paloaltonetworks.com/CVE-2017-15944 x_refsource_CONFIRM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-15944 government-resource