CVE-2019-17440

🗓️ 20 Dec 2019 15:22:18Reported by palo_altoType

Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and PA-7050 devices with an LFC installed and configured

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2019-17440	16 Mar 202409:22	–	circl
CNVD	Unspecified Vulnerability in Palo Alto Networks PA-7080 and PA-7050 PAN-OS	23 Dec 201900:00	–	cnvd
Cvelist	CVE-2019-17440 PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access	20 Dec 201915:22	–	cvelist
EUVD	EUVD-2019-7831	7 Oct 202500:30	–	euvd
NVD	CVE-2019-17440	20 Dec 201916:15	–	nvd
OSV	CVE-2019-17440	20 Dec 201916:15	–	osv
Palo Alto Networks	PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access	19 Dec 201919:35	–	paloalto
Palo Alto Networks	PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access	19 Dec 201919:35	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS Series PA-7000 9.0 < 9.0.5-h5 Remote Code Execution Vulnerability (PAN-SA-2019-0040)	28 Jan 202000:00	–	nessus
Prion	Input validation	20 Dec 201916:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange9.0–9.0.5

AND

paloaltonetworks pa-7050Match-

paloaltonetworks pa-7080Match-

[
  {
    "platforms": [
      "PA-7000 Series with 2nd Generation SMC"
    ],
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "9.0.6, 9.0.5-h3",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.5-h3",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.0"
      },
      {
        "status": "unaffected",
        "version": "8.1"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2019-17440

21 Nov 2024 04:32Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8 - 10

CVSS 210

EPSS0.0045

CWE-923