Detections
Analytics
Palo Alto Networks PAN-OS 8.1.x < 8.1.0 / 9.0.x < 9.0.0 / 9.1.x < 9.1.0 Vulnerability
low Nessus Plugin ID 155598
Language:
Synopsis
The remote PAN-OS host is affected by a vulnerabilityDescription
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.0 or 9.0.x prior to 9.0.0 or 9.1.x prior to 9.1.0. It is, therefore, affected by a vulnerability.- In versions of Palo Alto Networks PAN-OS software earlier than PAN-OS 10.0, the DHE cipher available for use in traffic decryption improperly shares a cryptographic secret across multiple TLS connections, which weakens its cryptographic strength. This is a prerequisite for successful exploitation of the Raccoon attack (CVE-2020-1968), which allows an attacker to eavesdrop on encrypted traffic over those TLS connections. (CVE-2020-1968)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to PAN-OS 8.1.0 / 9.0.0 / 9.1.0 or laterSee Also
https://security.paloaltonetworks.com/CVE-2020-1968
https://nvd.nist.gov/vuln/detail/CVE-2020-1968
Plugin Details
Severity: Low
ID: 155598
File Name: palo_alto_CVE-2020-1968.nasl
Version: 1.3
Type: combined
Family: Palo Alto Local Security Checks
Published: 11/18/2021
Updated: 12/5/2022
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.2
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.2
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2020-1968
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.2
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:paloaltonetworks:pan-os
Required KB Items: Settings/ParanoidReport, Host/Palo_Alto/Firewall/Version, Host/Palo_Alto/Firewall/Full_Version, Host/Palo_Alto/Firewall/Source
Exploit Ease: No known exploits are available
Patch Publication Date: 10/13/2021
Vulnerability Publication Date: 9/9/2020
Reference Information
CVE: CVE-2020-1968