VDB
CNVD-2024-20505
CNVD-2024-20505
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Palo Alto Networks PAN-OS是美国Palo Alto Networks公司的一款下一代防火墙软件。 Palo Alto Networks PAN-OS存在信任管理问题漏洞，该漏洞源于使用弱（低位强度）设备证书。攻击者可利用该漏洞能够执行中间人(MitM) 攻击。
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| paloaltonetworks | pan-os | 10.1.0, 11.0.0, 10.2.2 |
| Palo Alto Networks | Prisma Access | All |
| Palo Alto Networks | Cloud NGFW | All |
| Palo Alto Networks | PAN-OS | 10.2.0, 11.0.0, 11.1.0 |
Timeline
- Apr 9, 2024 CVE Published
- Apr 10, 2024 PoC Published
- Apr 15, 2024 PoC Published