vulnerability

Palo Alto Networks PAN-SA-2016-0005 (CVE-2016-3657): Unauthenticated Buffer Overflow in GlobalProtect/SSL VPN Web Interface

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Feb 24, 2016
Added
Oct 12, 2016
Modified
Jun 17, 2020

Description

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request.

Solutions

palo-alto-networks-pan-os-upgrade-5-0palo-alto-networks-pan-os-upgrade-6-0palo-alto-networks-pan-os-upgrade-6-1palo-alto-networks-pan-os-upgrade-7-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.