NLIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Kwetsbaarheden verholpen in Palo Alto PAN-OS
Advisory ansehen veröffentlicht 2024-11-14
Palo Alto Networks heeft kwetsbaarheden verholpen in PAN-OS.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-9472US | — | — | ||
A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series hardware platforms when Decryption policy is e… | ||||
| CVE-2024-5920US | medium4.8 | — | ||
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuratio… | ||||
| CVE-2024-5919US | medium6.5 | — | ||
A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to exfiltrate arbitrary files from firewalls… | ||||
| CVE-2024-5918US | medium4.3 | — | ||
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impac… | ||||
| CVE-2024-5917US | medium4.9 | — | ||
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables… | ||||
| CVE-2024-2552US | medium6.0 | — | ||
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete file… | ||||
| CVE-2024-2551US | high7.5 | — | ||
A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafte… | ||||
| CVE-2024-2550US | high7.5 | — | ||
A null pointer dereference vulnerability in the GlobalProtect gateway in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop the GlobalProtect service on… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
- Reference - certbundde; cveprojectv5external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan