Vulnerability Details CVE-2016-3654
The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote authenticated administrators to execute arbitrary OS commands via an SSH command parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.7%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
References
Products affected by CVE-2016-3654
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.0
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.0-h1
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.10
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.11
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.12
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.13
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.14
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.15
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.16
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.17
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.2
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.3
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.4
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.5
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.6
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.7
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.8
-
cpe:2.3:o:paloaltonetworks:pan-os:5.0.9
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.1
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.10
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.2
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.3
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.4
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.5
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.6
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.7
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.8
-
cpe:2.3:o:paloaltonetworks:pan-os:5.1.9
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.0
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.1
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.10
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.11
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.12
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.2
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.3
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.4
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.5
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.6
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.7
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.8
-
cpe:2.3:o:paloaltonetworks:pan-os:6.0.9
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.0
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.1
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.2
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.3
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.4
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.5
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.6
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.7
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.8
-
cpe:2.3:o:paloaltonetworks:pan-os:6.1.9
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.0
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.1
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.2
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.3
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.4
-
cpe:2.3:o:paloaltonetworks:pan-os:7.0.5