CVE-2016-9151

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
paloaltonetworkspan-os
5.0.0 ≤
𝑥
< 5.0.20
paloaltonetworkspan-os
5.1 ≤
𝑥
< 5.1.13
paloaltonetworkspan-os
6.0.0 ≤
𝑥
< 6.0.15
paloaltonetworkspan-os
6.1.0 ≤
𝑥
< 6.1.15
paloaltonetworkspan-os
7.0.0 ≤
𝑥
< 7.0.11
paloaltonetworkspan-os
7.1.0 ≤
𝑥
< 7.1.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94400
http://www.securitytracker.com/id/1037381
https://security.paloaltonetworks.com/CVE-2016-9151
https://www.exploit-db.com/exploits/40788/
https://www.exploit-db.com/exploits/40789/
http://www.securityfocus.com/bid/94400
http://www.securitytracker.com/id/1037381
https://security.paloaltonetworks.com/CVE-2016-9151
https://www.exploit-db.com/exploits/40788/
https://www.exploit-db.com/exploits/40789/