Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4753-h47c-jrw3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

EPSS

Процентиль: 98%
0.49408
Средний

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

CVSS3: 9.8
fstec
около 4 лет назад

Уязвимость интерфейсов портала GlobalProtect и шлюза GlobalProtect Gateway операционных систем PAN-OS, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 98%
0.49408
Средний

Дефекты

CWE-787