PT-2021-4868
CVE-2021-3053
·
تاريخ النشر
2021-09-08
·
تاريخ التحديث
2021-09-15
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
PAN-OS versions prior to 8.1.20
PAN-OS versions prior to 9.0.14
PAN-OS versions prior to 9.1.9
PAN-OS versions prior to 10.0.5
Description
The issue is related to improper handling of exceptional conditions in the dataplane of PAN-OS, allowing an unauthenticated network-based attacker to send specifically crafted traffic through the firewall, causing the service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.
Recommendations
For PAN-OS versions prior to 8.1.20, update to version 8.1.20 or later.
For PAN-OS versions prior to 9.0.14, update to version 9.0.14 or later.
For PAN-OS versions prior to 9.1.9, update to version 9.1.9 or later.
For PAN-OS versions prior to 10.0.5, update to version 10.0.5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾