CVE-2016-9151

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
VendorProductVersion
paloaltonetworkspan-os
5.0.0 ≤
𝑥
< 5.0.20
paloaltonetworkspan-os
5.1 ≤
𝑥
< 5.1.13
paloaltonetworkspan-os
6.0.0 ≤
𝑥
< 6.0.15
paloaltonetworkspan-os
6.1.0 ≤
𝑥
< 6.1.15
paloaltonetworkspan-os
7.0.0 ≤
𝑥
< 7.0.11
paloaltonetworkspan-os
7.1.0 ≤
𝑥
< 7.1.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94400
http://www.securitytracker.com/id/1037381
https://security.paloaltonetworks.com/CVE-2016-9151
https://www.exploit-db.com/exploits/40788/
https://www.exploit-db.com/exploits/40789/
http://www.securityfocus.com/bid/94400
http://www.securitytracker.com/id/1037381
https://security.paloaltonetworks.com/CVE-2016-9151
https://www.exploit-db.com/exploits/40788/
https://www.exploit-db.com/exploits/40789/