CVE-2019-1579
KEV
🔴 Łataj teraz
Wykonanie zdalnego kodu w PAN-OS umożliwia nieautoryzowanemu atakującemu uruchomienie dowolnego kodu.
CVSS
8.1
EPSS
46.0%
Exploit
weaponized
Vendor
paloaltonetworks
Opis źródłowy (NVD)
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
exploit rce
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 8.1 |
| CISA KEV (aktywnie wykorzystywane) | Tak |
| FIRST EPSS (prawdopodobieństwo exploita) | 46.0% |
| Opublikowano (NVD) | 2019-07-19 22:15:11 UTC |
| Ostatnia modyfikacja (NVD) | 2026-08-12 05:17:25 UTC |
Referencje
- http://www.securityfocus.com/bid/109310 (psirt@paloaltonetworks.com) [Broken Link, Third Party Advisory, VDB Entry]
- https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/ (psirt@paloaltonetworks.com) [Exploit, Third Party Advisory]
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010 (psirt@paloaltonetworks.com) [Broken Link, Third Party Advisory]
- https://security.paloaltonetworks.com/CVE-2019-1579 (psirt@paloaltonetworks.com) [Vendor Advisory]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1579 (134c704f-9b21-4f2e-91b3-4a467353bcc0) [US Government Resource]