PAN-OS vulnerabilities

An SSRF vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to cause the firewall to send network requests to unintended destinations or cause a DoS condition.

A buffer overflow vulnerability in the DNS proxy and DNS Server features of Palo Alto Networks PAN-OS Software allows an unauthenticated attacker with network access to cause a denial of service (DoS) condition on all PAN-OS platforms except Cloud NGFW and Prisma Access, and potentially execute arbitrary code on PA-Series hardware by sending specially crafted network traffic.

A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition.

A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on PA-Series firewalls. Panorama is also impacted.

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. To exploit this issue, the user must have access to the PAN-OS CLI and the device must be configured with a Luna Hardware Security Module (HSM).

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated administrator to store or execute a JavaScript payload using the web interface. This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series); Cloud NGFW and Prisma Access are not affected.

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a DoS condition by sending specially crafted network traffic to or through a dataplane interface. Repeated attempts cause the firewall to enter maintenance mode.

A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS software allows an authenticated administrator to execute arbitrary OS commands as root. The risk is significantly minimized when CLI access is restricted to a limited group of administrators.

An SSRF vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal services. The risk is minimized when the management interface is restricted to trusted internal IP addresses.

An authentication bypass vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN connection. Panorama, Cloud NGFW, and Prisma Access are not affected.

A file deletion vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory. This issue affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series).

An information disclosure vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens. This requires a legitimate user to first click on a malicious link provided by the attacker.

An IPv6 packet processing vulnerability in the dataplane of PAN-OS allows an unauthenticated attacker to bypass firewall security policies, enabling blocked traffic to reach protected services. This issue affects only Palo Alto Networks firewalls, not Cloud NGFW or Panorama.

Multiple cross-site scripting vulnerabilities in the User-ID Authentication Portal (Captive Portal), GlobalProtect gateway/portal features, and Clientless VPN of Palo Alto Networks PAN-OS software allow an unauthenticated attacker to store or execute malicious JavaScript payloads.

Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic.

A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows an authenticated administrator with CLI access to perform actions with root privileges. The risk is minimized when CLI access is restricted to trusted administrators and the management interface is protected.

A memory corruption vulnerability in tunnel traffic processing in PAN-OS allows an authenticated user to initiate system reboots using a maliciously crafted packet. Repeated attempts can put the firewall into maintenance mode.

Palo Alto Networks PAN-OS software has a cross-site scripting (XSS) vulnerability that allows a malicious authenticated administrator to store a JavaScript payload using the web interface. This affects PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are not affected.

Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a DoS condition by sending specially crafted network traffic. Panorama and Cloud NGFW are not impacted.

Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS software allow an authenticated administrator to bypass system restrictions and execute arbitrary commands as root. Exploitation requires access to the PAN-OS CLI or Web UI.

A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software allows a malicious authenticated administrator to store a JavaScript payload via the web interface.

An authentication bypass vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to bypass authentication controls when Cloud Authentication Service (CAS) is enabled. The risk is higher if CAS is enabled on the management interface and lower when other login interfaces are used.