CVE-2017-15944

🗓️ 11 Dec 2017 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 783 Views🌐 WEB

Palo Alto Networks PAN-OS < 8.0.6 Remote Code Execution CVE-2017-1594

Reporter	Title	Published	Views	Family All 34
0day.today	Palo Alto Networks Firewalls Remote Root Code Execution Vulnerability	14 Dec 201700:00	–	zdt
0day.today	Palo Alto Networks PAN-OS Cookie Injection Vulnerability	22 Dec 201700:00	–	zdt
0day.today	Palo Alto Networks - readSessionVarsFromFile() Session Corruption Exploit	9 May 201800:00	–	zdt
GithubExploit	Exploit for Improper Input Validation in Paloaltonetworks Pan-Os	24 May 201823:19	–	githubexploit
ATTACKERKB	CVE-2017-15944	11 Dec 201700:00	–	attackerkb
Circl	CVE-2017-15944	13 Dec 201709:00	–	circl
CISA KEV Catalog	Palo Alto Networks PAN-OS Remote Code Execution Vulnerability	18 Aug 202200:00	–	cisa_kev
CNVD	Palo Alto Networks PAN-OS Remote Code Execution Vulnerability	11 Dec 201700:00	–	cnvd
Check Point Advisories	Paloaltonetworks Panos Remote Code Execution (CVE-2017-15944) - Ver2	22 Nov 201800:00	–	checkpoint_advisories
Cvelist	CVE-2017-15944	11 Dec 201717:00	–	cvelist

NVD

Node

paloaltonetworks pan-osRange<6.1.19

paloaltonetworks pan-osRange7.0.0–7.0.19

paloaltonetworks pan-osRange7.1.0–7.1.14

paloaltonetworks pan-osRange8.0.0–8.0.6

Source	Link
security	www.security.paloaltonetworks.com/CVE-2017-15944
securitytracker	www.securitytracker.com/id/1040007
exploit-db	www.exploit-db.com/exploits/44597/
securityfocus	www.securityfocus.com/bid/102079
exploit-db	www.exploit-db.com/exploits/43342/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
device	query param	esp/cms_changeDeviceContext.esp	By injecting a crafted device parameter, the session deserialization/parsing can be corrupted to bypass authentication and manipulate session data.	CWE-20, CWE-119
action	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
method	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
data	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
cookie	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
id	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
async-mode	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119
refresh	request body	php/utils/router.php/Administrator.get	XML injection via Direct::getConfigByXpath with unsafely appended id to obj, enabling manipulation of backend XML requests and potential directory traversal.	CWE-20, CWE-119

17 Jun 2026 01:08Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.9834

SSVC

palo alto networks pan-os remote code execution cve-2017-15944 security vulnerability