DeutschShown in its original language — a full translation is planned for a future version.
PaloAlto Networks PAN-OS: Mehrere Schwachstellen
view advisory published 2024-04-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder Informationen offenzulegen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-3388US | medium5.0OT elevated | — | ||
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to interna… | ||||
| CVE-2024-3387US | medium5.9 | — | ||
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traff… | ||||
| CVE-2024-3386US | medium5.3 | — | ||
An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic de… | ||||
| CVE-2024-3385US | high7.5 | — | ||
A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to… | ||||
| CVE-2024-3384US | high7.5 | — | ||
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Win… | ||||
| CVE-2024-3383US | critical9.1 | — | ||
A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user… | ||||
| CVE-2024-3382US | high7.5 | — | ||
A memory leak exists in Palo Alto Networks PAN-OS software that enables an attacker to send a burst of crafted packets through the firewall that eventually prevents the firewall fr… | ||||
02
references
External citations — patches, advisories, analysis.
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- Palo Alto Networks Security Advisories vom 2024-04-10external
- WID-SEC-W-2024-0853 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan