PT-2021-18709 · Palo Alto Networks · Pan-Os

Published 2021-01-13 · Updated 2022-10-27 · CVE-2021-3031

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.18 PAN-OS versions prior to 9.0.12 PAN-OS versions prior to 9.1.5

Description The issue, also known as Etherleak, occurs because padding bytes in Ethernet packets on various firewall models are not cleared before the data frame is created, leaking a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall can collect potentially sensitive information from these packets.

Recommendations For versions prior to 8.1.18, update to PAN-OS 8.1.18 or later. For versions prior to 9.0.12, update to PAN-OS 9.0.12 or later. For versions prior to 9.1.5, update to PAN-OS 9.1.5 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-212

Related Identifiers

CVE-2021-3031

Affected Products

Pan-Os

References · 5

• https://osv.dev/vulnerability/CVE-2021-3031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3031 · Security Note
• https://security.paloaltonetworks.com/CVE-2021-3031 · Vendor Advisory
• https://t.me/cvenotify/8493 · Telegram Post
• https://t.me/cvenotify/8730 · Telegram Post