Remote Code Execution Vulnerability in PAN-OS by Palo Alto Networks
CVE-2019-1579

8.1HIGH

Key Information:

Vendor: Palo Alto Networks
Status: Palo Alto Networks Globalprotect Portal/gateway Interface
Vendor: CVE Published:; 19 July 2019

Badges

💰 Ransomware👾 Exploit Exists🟡 Public PoC🟣 EPSS 95%🦅 CISA Reported

Summary

A remote code execution vulnerability exists in PAN-OS versions 7.1.18 and earlier, 8.0.11-h1 and earlier, and 8.1.2 and earlier when the GlobalProtect Portal or GlobalProtect Gateway Interface is enabled. This flaw allows an unauthenticated attacker to execute arbitrary code on the device, potentially leading to unauthorized access and control over the affected system. Implementation of security best practices and timely updates are crucial to mitigating the risks associated with this vulnerability.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited and is known by the CISA as enabling ransomware campaigns.

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

Palo Alto Networks GlobalProtect Portal/Gateway Interface PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2 and earlier releases

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-1579
Created by securifera

CVE-2019-1579
Created by Elsfa7-110