A buffer overflow vulnerability in the IKEv2 processing of Palo Alto Networks PAN-OS® software allows an unauthenticated network-based attacker to execute arbitrary code with elevated privileges on the firewall, or cause a denial of service (DoS) condition. Panorama, Cloud NGFW, and Prisma® Access are not impacted by these vulnerabilities.
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Cloud NGFW | 12.1.0, 11.2.0, 11.1.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| palo alto networks | pan-os | mitre_affected | 90% |
| palo alto networks | prisma access | mitre_affected | 90% |
Updated affected versions, severity to HIGH, CVSS estimate to 7.5, and marked the vulnerability as actively exploited with an exploit available.
Initial creation
