CVE-2021-3059: PAN-OS: OS Command Injection Vulnerability When Performing Dynamic Updates
An OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface exists when performing dynamic updates. This vulnerability enables a man-in-the-middle attacker to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers that have Prisma Access 2.1 Preferred or Prisma Access 2.1 Innovation firewalls are impacted by this issue.
Affected Software
Remediation
Information
Information
Event History
Frequently Asked Questions
What is CVE-2021-3059?
CVE-2021-3059 is an OS command injection vulnerability in the Palo Alto Networks PAN-OS management interface.
How does CVE-2021-3059 impact PAN-OS?
CVE-2021-3059 allows a man-in-the-middle attacker to execute arbitrary OS commands to escalate privileges on PAN-OS.
Which versions of PAN-OS are affected by CVE-2021-3059?
PAN-OS 8.1 versions earlier than 8.1.20, PAN-OS 9.0 versions earlier than 9.0.14, PAN-OS 9.1 versions earlier than 9.1.11, PAN-OS 10.0 versions earlier than 10.0.8, and PAN-OS 10.1 versions earlier than 10.1.3 are affected by CVE-2021-3059.
What is the severity of CVE-2021-3059?
CVE-2021-3059 has a severity rating of high.
How can I fix CVE-2021-3059?
To fix CVE-2021-3059, upgrade PAN-OS to version 8.1.20, 9.0.14, 9.1.11, 10.0.8, or 10.1.3, depending on the installed version.