CVE-2016-9150 Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 a...
CriticalCVSS 9.8
EPSS 34.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | >= 5.0.0, < 5.0.20 | 5.0.20 |
| paloaltonetworks pan-os | >= 5.1, < 5.1.13 | 5.1.13 |
| paloaltonetworks pan-os | >= 6.0.0, < 6.0.15 | 6.0.15 |
| paloaltonetworks pan-os | >= 6.1.0, < 6.1.15 | 6.1.15 |
| paloaltonetworks pan-os | >= 7.0.0, < 7.0.11 | 7.0.11 |
| paloaltonetworks pan-os | >= 7.1.0, < 7.1.6 | 7.1.6 |
References
- 94399 third-party-advisory vdb-entry
- 1037382 third-party-advisory vdb-entry
- security.paloaltonetworks.com
- 40790 exploit third-party-advisory vdb-entry