CVE-2019-15017

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-10-09 · updated 2026-06-17
Weakness: CWE-798

Description

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this can allow an attacker to authenticate to the service using hardcoded credentials.

Affected products

Palo Alto Networks Zingbox Inspector: through 1.294

References

https://security.paloaltonetworks.com/CVE-2019-15017
https://security.paloaltonetworks.com/CVE-2019-15017

Get alerted when CVE-2019-15017 or the next vulnerability affects your stack