Threat Investigation
Request a demo

CVE-2021-3064

Critical

Description

A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to disrupt system processes and potentially execute arbitrary code with root privileges. The attacker must have network access to the GlobalProtect interface to exploit this issue. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Prisma Access customers are not impacted by this issue.

SeverityCritical
CVSS9.8
Exploit probability—
ProductPaloaltonetworks Pan-os
PublishedNov 10, 2021
First seenNov 10, 2021
Weakness typeCWE-121CWE-121

How to fix

Update
  • paloaltonetworks pan-os8.1.17 or later

Affected products

ProductAffected versionsFixed in
paloaltonetworks pan-os8.1.0 ≤ v < 8.1.178.1.17

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.