Servers and applications
CVE-2017-15940
The web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote authenticated users to execute arbitrary code via unspecified vectors.
- Severity
- Critical 9.8
- Published
- 11 Dec 2017
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.1.19, 7.0.19, 7.1.14, 8.0.6
- Exploit chance
- 4.9% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 11 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os |
|