CVE-2016-3655 The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via a...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via an unspecified API call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | >= 5.0.0, < 5.0.18 | 5.0.18 |
| paloaltonetworks pan-os | >= 5.1, < 5.1.11 | 5.1.11 |
| paloaltonetworks pan-os | >= 6.0.0, < 6.0.13 | 6.0.13 |
| paloaltonetworks pan-os | >= 6.1.0, < 6.1.10 | 6.1.10 |
| paloaltonetworks pan-os | >= 7.0.0, <= 7.0.5 | No fix listed |