Skip to content
OpenAdvisories
High NCSC-2024-0444 8 CVEs

Kwetsbaarheden verholpen in Palo Alto PAN-OS

Published Nov 14, 2024 · Updated Nov 14, 2024 · nl

Vendor: Palo Alto Networks Product: Cloud NGFW Product: PAN-OS

Summary

Palo Alto Networks heeft kwetsbaarheden verholpen in PAN-OS.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om beveiligingsmaatregelen te omzeilen en zo verkeer naar en door het systeem te leiden dat aanvankelijk niet is toegestaan, of een Denial-of-Service veroorzaken.

Oplossingen
Palo Alto heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 8

  • High 8.7
    CVE-2024-2550

    PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway Using a Specially Crafted Packet

    A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on the firewall by sending a specially crafted packet that causes a denial of ser…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 8.7
    CVE-2024-2551

    PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted Packet

    A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 8.7
    CVE-2024-9472

    PAN-OS: Firewall Denial of Service (DoS) Using Specially Crafted Traffic

    A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when Decryption policy is enabled allows an unauthenticated attacker to crash PAN-OS by sending specific t…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.8
    CVE-2024-2552

    PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)

    A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall.

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.3
    CVE-2024-5918

    PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User

    An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate use…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.1
    CVE-2024-5919

    PAN-OS: Authenticated XML External Entities (XXE) Injection Vulnerability

    A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls to an attacker controlled server. This attack requires network access to the f…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.6
    CVE-2024-5920

    PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OS Enables Impersonation of a Legitimate Administrator

    A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administr…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 2.1
    CVE-2024-5917

    PAN-OS: Server-Side Request Forgery in WildFire

    A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.

    Palo Alto Networks PAN-OS Cloud NGFW Network devices

Revision history

  1. #0

    Initiele versie

References