CVE-2017-15870

Description

Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving image path execution hijacking.

Risk Information

Base Score
6.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.094

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-15870 are affected in globalprotect 4.0.2NCM
CVE-2017-15870NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234