Description
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 8.1.0 – < 8.1.26, 9.0.0 – < 9.0.17-h4, 9.1.0 – < 9.1.17, 10.1.0 – < 10.1.11-h4, 10.2.0 – < 10.2.7-h3, 11.0.0 – < 11.0.3 | 8.1.26 |
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | Prisma Access | 10.2 – < 10.2.4 | 10.2.4 |
Advisories 3
- ICSA-24-102-04 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · May 13, 2025
- SSA-455250 SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 Siemens ProductCERT · May 13, 2025
- WID-SEC-2024-0853 PaloAlto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2024