PT-2017-17584 · Palo Alto Networks · Pan-Os

Christophe Schleypen · Published 2017-04-10 · Updated 2019-10-03 · CVE-2017-7218

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 7.1.9

Description A privilege escalation issue exists in the Management Web Interface due to improper validation of specific request parameters, potentially allowing execution of code with higher privileges. This issue requires an attacker to be authenticated.

Recommendations For versions prior to 7.1.9, update to version 7.1.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the Management Web Interface to minimize the risk of exploitation.

Fix

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-7218

Affected Products

Pan-Os

References · 5

• https://osv.dev/vulnerability/CVE-2017-7218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7218 · Security Note
• https://security.paloaltonetworks.com/CVE-2017-7218 · Note
• http://securitytracker.com/id/1038248 · Note
• http://securityfocus.com/bid/97592 · Note