Skip to content
OpenAdvisories
Medium WID-SEC-2024-0853 7 CVEs

PaloAlto Networks PAN-OS: Mehrere Schwachstellen

Published Apr 10, 2024 · Updated Apr 10, 2024 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Informationen offenzulegen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 7

  • High 7.5
    CVE-2024-3382

    PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets

    A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall from processing traffic. This issue applies only to PA-5400 Series devices that a…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 7.5
    CVE-2024-3384

    PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

    A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenan…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 7.5
    CVE-2024-3385

    PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled

    A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewal…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • High 7.4
    CVE-2024-3383

    PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)

    A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowe…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.3
    CVE-2024-3386

    PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended

    An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions t…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.3
    CVE-2024-3387

    PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure

    A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traffic between the Panorama management server and the firewalls it manages. With su…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 4.1
    CVE-2024-3388

    PAN-OS: User Impersonation in GlobalProtect SSL VPN

    A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive re…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References