Palo Alto Networks · Pan-Os · CVE-2021-3047
**Name of the Vulnerable Software and Affected Versions**
PAN-OS versions 8.1 through 8.1.18
PAN-OS versions 9.0 through 9.0.13
PAN-OS versions 9.1 through 9.1.9
PAN-OS versions 10.0 through 10.0.3
**Description**
A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to impersonate another authenticated web interface administrator's session.
**Recommendations**
For PAN-OS 8.1 versions earlier than 8.1.19, update to version 8.1.19 or later.
For PAN-OS 9.0 versions earlier than 9.0.14, update to version 9.0.14 or later.
For PAN-OS 9.1 versions earlier than 9.1.10, update to version 9.1.10 or later.
For PAN-OS 10.0 versions earlier than 10.0.4, update to version 10.0.4 or later.