Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6whp-h3pf-v3x5

Опубликовано: 14 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 7.5

Описание

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode.

This issue does not affect Cloud NGFW or Prisma Access.

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode.

This issue does not affect Cloud NGFW or Prisma Access.

EPSS

Процентиль: 20%
0.00062
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-754

Связанные уязвимости

CVSS3: 7.5
nvd
9 месяцев назад

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access.

CVSS3: 7.5
fstec
9 месяцев назад

Уязвимость функции веб-прокси операционной системы PAN-OS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 20%
0.00062
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-754