CVE-2019-15017: Zingbox Inspector

High severity, CVSS 8.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this can allow an attacker to authenticate to the service using hardcoded credentials.

Affected products

• Zingbox Inspector: up to and including 1.294

Published 2019-10-09. Last modified 2026-06-17.