PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

🗓️ 13 Jan 2021 17:00:00Reported by Palo Alto Networks Product Security Incident Response TeamType

paloalto🔗 securityadvisories.paloaltonetworks.com👁 116 Views

Information exposure in Ethernet data frame construction on PAN-OS firewall

Reporter	Title	Published	Views	Family All 117
zdt	Cisco ASA < 8.4.4.6\|8.2.5.32 Ethernet Information Leak	10 Jun 201300:00	–	zdt
zdt	Ethernet Device Drivers Frame Padding Info Leakage Expl (Etherleak)	23 Mar 200700:00	–	zdt
GithubExploit	exploits	25 May 202601:12	–	githubexploit
ATTACKERKB	CVE-2022-22216	13 Jul 202207:00	–	attackerkb
ATTACKERKB	CVE-2021-3031	13 Jan 202117:00	–	attackerkb
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Linux operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

Vulners

Node

paloaltonetworks pan-osMatch8.0.0pa-200,_pa-220,_pa-500,_pa-5000_series,_pa-800,_pa-3000_series,_pa-3200_series,_pa-5200_series,_pa-7000_series

paloaltonetworks pan-osRange8.1–8.1.18pa-200,_pa-220,_pa-500,_pa-5000_series,_pa-800,_pa-3000_series,_pa-3200_series,_pa-5200_series,_pa-7000_series

paloaltonetworks pan-osRange9.0–9.0.12pa-220,_pa-800,_pa-3000_series,_pa-3200_series,_pa-5200_series,_pa-7000_series

paloaltonetworks pan-osRange9.1–9.1.5pa-220,_pa-800,_pa-3000_series,_pa-3200_series,_pa-5200_series,_pa-7000_series

paloaltonetworks pan-osMatch7.1.0pa-200,_pa-220,_pa-500,_pa-5000_series,_pa-800,_pa-2000_series,_pa-3000_series,_pa-3200_series,_pa-5200_series,_pa-7000_series

Source	Link
security	www.security.paloaltonetworks.com/CVE-2021-3031

13 Jan 2021 17:00Current

1.7Low risk

Vulners AI Score1.7

CVSS 3.14.3

CVSS 23.3

EPSS0.72321