UpHeron
All vulnerabilities

Servers and applications

CVE-2019-17440

Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and PA-7050 devices with an LFC installed and configured. This issue does not affect PA-7000 Series…

Severity
Critical 9.8
Published
20 Dec 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.7% in the next 30 daysHigher than 77% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 9.0 up to 9.0.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-17440
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-17440