Palo Alto PAN-OS Vulnerabilities Could be Exploited To Execute Arbitrary Code

NJCCIC Advisory

Original Release Date: 9/10/2020

Summary

Several vulnerabilities were found in Palo Alto PAN-OS, including buffer overflow, reflected cross-site scripting, denial-of-service, and command injection flaws. The most severe vulnerabilities could enable a remote threat actor to execute arbitrary code on the affected application.

Recommendations

The NJCCIC recommends administrators review the Palo Alto Networks Security Advisory and update affected versions of PAN-OS as soon as possible after appropriate testing.

New Jersey Cybersecurity & Communications Integration Cell

2 Schwarzkopf Dr, Ewing Township, NJ 08628

njccic@cyber.nj.gov

OUR COMMITMENT

The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.

Agency Seals of State of NJ, NJOHSP and NJCCIC

STAY CONNECTED:

View our Privacy Policy here.

View our Site Index here.