Main
Vulnerability Database
Exploits
ID:6313 - Exploit for Command injection in Palo Alto PAN-OS - CVE-2017-15944
ID:6313 - Exploit for Command injection in Palo Alto PAN-OS - CVE-2017-15944
Published: June 17, 2021
Vulnerability identifier: #VU9662
Vulnerability risk: High
CVE-ID: CVE-2017-15944
CWE-ID: CWE-77
Exploitation vector: Remote access
Vulnerable software:
Palo Alto PAN-OS
Palo Alto PAN-OS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary command on the target system.
The weakness exists due to multiple vulnerabilities in PAN-OS on Management Interface. A remote attacker can trigger deserialization error in processing the PHPSESSID cookie, modify the session file, cause an XML injection cookie injection error, bypass the panAuthCheck authentication directive controlling access to the '/php' directory, conduct an XML injection attack against the '/php/utils/router.php' script, create arbitrary directories, conduct a command injection attack against the '/usr/local/bin/genindex_batch.sh' cron script and execute arbitrary system commands with root privileges.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists due to multiple vulnerabilities in PAN-OS on Management Interface. A remote attacker can trigger deserialization error in processing the PHPSESSID cookie, modify the session file, cause an XML injection cookie injection error, bypass the panAuthCheck authentication directive controlling access to the '/php' directory, conduct an XML injection attack against the '/php/utils/router.php' script, create arbitrary directories, conduct a command injection attack against the '/usr/local/bin/genindex_batch.sh' cron script and execute arbitrary system commands with root privileges.
Successful exploitation of the vulnerability may result in system compromise.
Remediation
Update to version 6.1.19, 7.0.19, 7.1.14, 8.0.6.