Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2021-3063— PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces

CVSS 7.5 · High EPSS 0.43% · P63
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-3063

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PAN-OS: Denial-of-Service (DoS) Vulnerability in GlobalProtect Portal and Gateway Interfaces
Source: NVD (National Vulnerability Database)
Vulnerability Description
An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.21; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h4; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8-h4; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers are not impacted by this issue.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
对异常条件的处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
GlobalProtect 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Palo Alto Networks GlobalProtect是美国Palo Alto Networks公司的一套网络防护软件。该软件可提供防火墙监控及威胁预防等功能。 Palo Alto Networks GlobalProtect portal and gateway存在安全漏洞，攻击者可利用该漏洞向GlobalProtect接口发送特制的流量，从而导致服务停止响应。受影响的系统包括：PAN-OS 8.1.21之前的PAN-OS 8.1版本；PAN-OS 9.0.14-h4之前的PAN-OS 9.0
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Palo Alto NetworksPAN-OS 8.1 ~ 8.1.21 -
Palo Alto NetworksPrisma Access 2.2 all -

II. Public POCs for CVE-2021-3063

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-3063

请登录查看更多情报信息。

Same Patch Batch · Palo Alto Networks · 2021-11-10 · 8 CVEs total

CVE-2021-30649.8 CRITICALPAN-OS: Memory Corruption Vulnerability in GlobalProtect Portal and Gateway Interfaces
CVE-2021-30588.8 HIGHPAN-OS: OS Command Injection Vulnerability in Web Interface XML API
CVE-2021-30568.8 HIGHPAN-OS: Memory Corruption Vulnerability in GlobalProtect Clientless VPN During SAML Authen
CVE-2021-30628.1 HIGHPAN-OS: Improper Access Control Vulnerability Exposing AWS Instance Metadata Endpoint to G
CVE-2021-30608.1 HIGHPAN-OS: OS Command Injection in Simple Certificate Enrollment Protocol (SCEP)
CVE-2021-30598.1 HIGHPAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates
CVE-2021-30616.4 MEDIUMPAN-OS: OS Command Injection Vulnerability in the Command Line Interface (CLI)

IV. Related Vulnerabilities

Same product: PAN-OS
Same vendor: Palo Alto Networks
Same weakness: CWE-755

V. Comments for CVE-2021-3063

No comments yet

Leave a comment