Description (CNA)
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web or dataplane interface to cause a denial of service (DoS) condition on VM-Series firewalls or execute arbitrary code with root privileges on the PA-Series firewalls. The security risk posed by this issue is minimized when the management interface is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . Panorama is impacted by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / Cloud NGFW | affected All |
| Palo Alto Networks / PAN-OS | affected 12.2.0 before 12.2.3; affected 12.1.0 before 12.1.4-h10; affected 11.2.0 before 11.2.4-h21; affected 11.1.0 before 11.1.4-h36; affected 10.2.0 before 10.2.7-h37 |
| Palo Alto Networks / Prisma Access | unaffected 12.1.0 before 12.1.4-h10; affected 11.2.0 before 11.2.4-h21; affected 10.2.0 before 10.2.7-h37 |
CWE
CWE-787
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.