---
id: "CVE-2017-15944"
kind: "vulnerability"
aliases: ["CVE-2017-15944"]
title: "paloaltonetworks pan-os: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows\u2026"
severity: "critical"
cvss: 9.8
epss: 0.9834
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Palo Alto Networks PAN-OS", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "paloaltonetworks pan-os", "fixed": ["6.1.19"], "affected": "< 6.1.19", "ecosystem": "vendor"}, {"name": "paloaltonetworks pan-os", "fixed": ["7.0.19"], "affected": ">= 7.0.0, < 7.0.19", "ecosystem": "vendor"}, {"name": "paloaltonetworks pan-os", "fixed": ["7.1.14"], "affected": ">= 7.1.0, < 7.1.14", "ecosystem": "vendor"}, {"name": "paloaltonetworks pan-os", "fixed": ["8.0.6"], "affected": ">= 8.0.0, < 8.0.6", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "firewall", "infrastructure", "palo-alto", "pan-os", "self-hosted"]
not_affected_if: ["managed-hosting"]
published_at: "2017-12-11T17:29:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-15944", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-15944", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-15944", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# paloaltonetworks pan-os: Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows…

Palo Alto Networks PAN-OS, the firewall operating system, contains unspecified flaws that can be chained for remote code execution. An attacker who chains them can run commands on the device, which sits on the network edge.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Palo Alto Networks PAN-OS affected ? fixed ?
- vendor:paloaltonetworks pan-os affected < 6.1.19 fixed 6.1.19
- vendor:paloaltonetworks pan-os affected >= 7.0.0, < 7.0.19 fixed 7.0.19
- vendor:paloaltonetworks pan-os affected >= 7.1.0, < 7.1.14 fixed 7.1.14
- vendor:paloaltonetworks pan-os affected >= 8.0.0, < 8.0.6 fixed 8.0.6

## How to check

Check the PAN-OS version on the device (Device > Software or 'show system info') and compare it with the vendor advisory for CVE-2017-15944.

## Fix

Apply the vendor's PAN-OS update as CISA required; the fixed version is not stated in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-15944
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2017-15944
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2017-15944

## From the sources

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interface.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_