Credential Bypass Vulnerability

A vulnerability exists whereby an unauthenticated user can get administrator access to the device via the web management UI without supplying credentials. Ref 37034 This vulnerability can result in total compromise of the device. This issue affects PAN-OS 4.1.3 and earlier; PAN-OS 4.0.9 and...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can execute arbitrary code as root on the device. Ref 36983 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.3 and earlier; PAN-OS 4.0.9 and earlier;...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34502 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.1 an...

OpenSSL Plain Text Recovery Attack Vulnerability

The OpenSSL library implementation is vulnerable to a plain text recovery attack by performing timing analysis of the time required to decrypt encrypted data. A detailed report of this issue is available at http://www.isg.rhul.ac.uk/kp/dtls.pdf. Ref 36017 This vulnerability can theoretically resu...