Critical RCE Vulnerability Found in Palo Alto Networks VPN Product

guest · Jul 22, 2019

Critical RCE Vulnerability Found in Palo Alto Networks VPN Product
July 22, 2019
https://www.securityweek.com/critical-rce-vulnerability-found-palo-alto-networks-vpn-product

Palo Alto Networks published an advisory last week after researchers Orange Tsai and Meh Chang published a blog post describing the vulnerability. The researchers also released proof-of-concept (PoC) code and provided a command that can be used to identify vulnerable installations.

According to the vendor’s advisory, the flaw, tracked as CVE-2019-1579, affects the GlobalProtect portal and GlobalProtect Gateway interface products, and it allows an unauthenticated attacker to remotely execute arbitrary code.
The security hole was patched with the release of PAN-OS versions 7.1.19, 8.0.12 and 8.1.3. Earlier versions are impacted.

Researchers at Tenable have also analyzed CVE-2019-1579 and described it as a “format string vulnerability in the PAN SSL Gateway, which handles client/server SSL handshakes.”
Click to expand...

guest · Nov 10, 2021

Massive Zero-Day Hole Found in Palo Alto Security Appliances
November 10, 2021
https://threatpost.com/massive-zero-day-hole-found-in-palo-alto-security-appliances/176170/

Researchers have developed a working exploit to gain remote code execution (RCE) via a massive vulnerability in a security appliance from Palo Alto Networks (PAN), potentially leaving more than 70,000 vulnerable firewalls with their goods exposed to the internet.

The critical zero day, tracked as CVE 2021-3064 and scoring a CVSS rating of 9.8 out of 10 for vulnerability severity, is in PAN’s GlobalProtect firewall. It allows for unauthenticated RCE on multiple versions of PAN-OS 8.1 prior to 8.1.17, on both physical and virtual firewalls.
Click to expand...

Randori researchers said in a Wednesday post that if an attacker successfully exploits the weakness, they can gain a shell on the targeted system, access sensitive configuration data, extract credentials and more.
Click to expand...

Randori: Zero-Day Disclosure: Palo Alto Networks GlobalProtect VPN CVE-2021-3064

On November 10, 2021 Palo Alto Networks (PAN) provided an update that patched CVE-2021-3064 which was discovered and disclosed by Randori. This vulnerability affects PAN firewalls using the GlobalProtect Portal VPN and allows for unauthenticated remote code execution on vulnerable installations of the product. The issue affects multiple versions of PAN-OS 8.1 prior to 8.1.17 and Randori has found numerous vulnerable instances exposed on internet-facing assets, in excess of 70,000 assets.
Click to expand...

Log in or Sign up

Critical RCE Vulnerability Found in Palo Alto Networks VPN Product

guest Guest

guest Guest

Log in or Sign up

Critical RCE Vulnerability Found in Palo Alto Networks VPN Product

guest Guest

guest Guest

Useful Searches