CVE-2019-1579: Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
First published: Fri Jul 19 2019(Updated: )
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
Credit: psirt@paloaltonetworks.com psirt@paloaltonetworks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Paloaltonetworks Pan-os | <=7.1.18 | |
| Paloaltonetworks Pan-os | >=8.0.0<=8.0.11 | |
| Paloaltonetworks Pan-os | >=8.1.0<=8.1.2 | |
| Palo Alto Networks PAN-OS | ||
| Paloaltonetworks Pan-os | <7.1.19 | |
| Paloaltonetworks Pan-os | >=8.0.0<8.0.12 | |
| Paloaltonetworks Pan-os | >=8.1.0<8.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/109310
- https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- https://security.paloaltonetworks.com/CVE-2019-1579
- https://nvd.nist.gov/vuln/detail/CVE-2019-1579
Frequently Asked Questions
What is CVE-2019-1579?
CVE-2019-1579 is a Palo Alto Networks PAN-OS Remote Code Execution Vulnerability.
How severe is CVE-2019-1579?
CVE-2019-1579 has a severity rating of 8.1, which is considered high.
Which software versions are affected by CVE-2019-1579?
PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled are affected.
How can an attacker exploit CVE-2019-1579?
An unauthenticated remote attacker can exploit CVE-2019-1579 to execute arbitrary code.
Where can I find more information about CVE-2019-1579?
You can find more information about CVE-2019-1579 at the following references: [SecurityFocus](http://www.securityfocus.com/bid/109310), [Devco.re Blog](https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/), [SonicWall PSIRT](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010).
- collector/nvd-index
- agent/type
- agent/description
- agent/title
- agent/weakness
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/severity
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- collector/nvd-cve
- vendor/paloaltonetworks
- canonical/paloaltonetworks pan-os
- version/paloaltonetworks pan-os/7.1.18
- version/paloaltonetworks pan-os/8.0.0
- version/paloaltonetworks pan-os/8.0.11
- version/paloaltonetworks pan-os/8.1.0
- version/paloaltonetworks pan-os/8.1.2
- vendor/palo alto networks
- canonical/palo alto networks pan-os