CVE-2019-1581
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root access to PAN-OS. This issue affects PAN-OS 7.1 versions prior to 7.1.24-h1, 7.1.25; 8.0 versions prior to 8.0.19-h1, 8.0.20; 8.1 versions prior to 8.1.9-h4, 8.1.10; 9.0 versions prior to 9.0.3-h3, 9.0.4.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 7.1 < 7.1.24-h1, 7.1.25 | affected |
| Palo Alto Networks | PAN-OS | 8.0 < 8.0.19-h1, 8.0.20 | affected |
| Palo Alto Networks | PAN-OS | 8.1 < 8.1.9-h4, 8.1.10 | affected |
| Palo Alto Networks | PAN-OS | 9.0 < 9.0.3-h3, 9.0.4 | affected |
| Palo Alto Networks | PAN-OS | all <= 7.0 | unknown |
Weaknesses
- CWE-78: CWE-78 OS Command Injection
Workarounds
This issue affects the SSH management interface of PAN-OS and is strongly mitigated by following best practices for securing the PAN-OS management interfaces. Our best practices guidelines reduce the exposure of device management interfaces to potential attacker.
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.