CVE-2019-17440

Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issue affects PAN-OS 9.0 versions prior to 9.0.5-h3 on PA-7080 and PA-7050 devices with an LFC installed and configured. This issue does not affect PA-7000 Series deployments using the first-generation SMC and the Log Processing Card (LPC). This issue does not affect any other PA series devices. This issue does not affect devices without an LFC. This issue does not affect PAN-OS 8.1 or prior releases. This issue only affected a very limited number of customers and we undertook individual outreach to help them upgrade. At the time of publication, all identified customers have upgraded SW or content and are not impacted.

• CWE-923

• https://security.paloaltonetworks.com/CVE-2019-17440
• https://security.paloaltonetworks.com/CVE-2019-17440

Published

Dec 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17434LavaLite through 5.7 has XSS via a crafted account name that…5.4
• CVE-2019-17435A Local Privilege Escalation vulnerability exists in the Glo…5.5
• CVE-2019-17436A Local Privilege Escalation vulnerability exists in GlobalP…7.1
• CVE-2019-17437An improper authentication check in Palo Alto Networks PAN-O…7.8
• CVE-2019-17438Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17439Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17441Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17442Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17443Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17444Jfrog Artifactory uses default passwords (such as "password"…9.8
• CVE-2019-17445An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, …5.5
• CVE-2019-17446An issue was discovered in Eracent EPA Agent through 10.2.26…7.8