Detections
Analytics
Palo Alto Networks PAN-OS 7.1.x < 7.1.26 / 8.0.x < 8.0.21 / 8.1.x < 8.1.13 / 9.0.x < 9.0.7 Multiple Vulnerabilities
medium Nessus Plugin ID 148123
Language:
Synopsis
The remote PAN-OS host is affected by multiple vulnerabilitiesDescription
The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.26 or 8.0.x prior to 8.0.21 or 8.1.x prior to 8.1.13 or 9.0.x prior to 9.0.7. It is, therefore, affected by multiple vulnerabilities.- OpenSSH software included with PAN-OS has been upgraded to resolve multiple vulnerabilities.
(CVE-2018-20685, CVE-2019-6109, CVE-2019-6111)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to PAN-OS 7.1.26 / 8.0.21 / 8.1.13 / 9.0.7 or laterSee Also
https://security.paloaltonetworks.com/PAN-SA-2020-0002
https://cwe.mitre.org/data/definitions/706.html
Plugin Details
Severity: Medium
ID: 148123
File Name: palo_alto_PAN-SA-2020-0002.nasl
Version: 1.4
Type: combined
Family: Palo Alto Local Security Checks
Published: 3/25/2021
Updated: 5/10/2022
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.1
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 4.5
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P
CVSS Score Source: CVE-2019-6111
CVSS v3
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 6.1
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
CVSS Score Source: CVE-2019-6109
Vulnerability Information
CPE: cpe:/o:paloaltonetworks:pan-os
Required KB Items: Host/Palo_Alto/Firewall/Version, Host/Palo_Alto/Firewall/Full_Version, Host/Palo_Alto/Firewall/Source
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/8/2020
Vulnerability Publication Date: 1/10/2019