GovCERT.HK - Security Alert (A20-09-02): Multiple Vulnerabilities in Palo Alto PAN-OS

Description:

Palo Alto has published security advisories to address multiple vulnerabilities in PAN-OS. The detailed information about the vulnerabilities can be found at:

https://security.paloaltonetworks.com/CVE-2020-2036
https://security.paloaltonetworks.com/CVE-2020-2037
https://security.paloaltonetworks.com/CVE-2020-2038
https://security.paloaltonetworks.com/CVE-2020-2039
https://security.paloaltonetworks.com/CVE-2020-2040
https://security.paloaltonetworks.com/CVE-2020-2041
https://security.paloaltonetworks.com/CVE-2020-2042
https://security.paloaltonetworks.com/CVE-2020-2043
https://security.paloaltonetworks.com/CVE-2020-2044

Please note that PAN-OS 8.0 has reached its End-Of-Life (EOL) on 31.10.2019. No security updates will be provided after that. Users should arrange upgrading the PAN-OS to supported versions or migrating to other supported technology.

Affected Systems:

PAN-OS 10 versions earlier than PAN-OS 10.0.1
PAN-OS 9.1 versions earlier than PAN-OS 9.1.4
PAN-OS 9.0 versions earlier than PAN-OS 9.0.10
PAN-OS 8.1 versions earlier than PAN-OS 8.1.16
All versions of PAN-OS 8.0

Impact:

Depending on the vulnerability exploited, a successful attack could lead to arbitrary code execution, arbitrary command execution, information disclosure, elevation of privilege, cross-site scripting or denial of service on an affected system.

Recommendation:

Software updates for affected systems are now available. System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

System administrators should contact their product support vendors for the fixes and assistance.

More Information:

Tag: PAN-OS , Palo Alto