CVE-2019-1576

2019-07-1613:44:21

palo_alto

www.cve.org

9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.9%

JSON

Command injection in PAN-0S 9.0.2 and earlier may allow an authenticated attacker to gain access to a remote shell in PAN-OS, and potentially run with the escalated user’s permissions.

CNA Affected

[
  {
    "product": "Palo Alto Networks PAN-OS",
    "vendor": "Palo Alto",
    "versions": [
      {
        "status": "affected",
        "version": "PAN-0S 9.0.2 and earlier"
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2019-1576