CRITICAL🇵🇱 Wersja polska

CVE-2021-3064

CVSS 9.8v3.1pub. 2021-11-10upd. 2024-11-21

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Palo Alto Networks PAN-OS

    OS
    Paloaltonetworks
    8.1.0 – 8.1.17 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEFirewallVPN
CWE
References

Related vulnerabilities

CVE-2026-0300CRITICAL9.3⚠ KEVPL ✓same product

Buffer overflow RCE z uprawnieniami root w PAN-OS Captive Portal

CVE-2024-0012CRITICAL9.3⚠ KEVPL ✓same product

Authentication bypass w PAN-OS umożliwiający przejęcie uprawnień administratora

CVE-2024-3400CRITICAL10.0⚠ KEVPL ✓same product

RCE jako root w GlobalProtect — command injection w PAN-OS

CVE-2020-2021CRITICAL10.0⚠ KEVPL ✓same product

PAN-OS: Pomijanie uwierzytelnienia SAML przez brak weryfikacji podpisów

CVE-2017-15944CRITICAL9.8⚠ KEVPL ✓same product

RCE w Palo Alto Networks PAN-OS przez interfejs zarządzania