UpTrajectory Review
Palo Alto Networks has issued a warning about a serious buffer overflow vulnerability in its PAN-OS user-ID authentication portal, which is currently being exploited by attackers. This flaw allows unauthorized users to execute arbitrary code with root privileges on exposed firewalls, posing a significant risk to small and medium-sized businesses (SMBs) that rely on this technology for network security.
For SMB operators, this vulnerability is a critical reminder of the importance of maintaining robust cybersecurity practices. If your business uses PA-Series or VM-Series firewalls with User-ID Authentication Portal enabled, immediate action is necessary to mitigate risks. The advisory suggests restricting access to trusted internal networks, which is a proactive step. However, the fact that a fix is not expected until May means that businesses must remain vigilant and monitor their systems closely in the interim.
“The flaw allows attackers to execute arbitrary code with root privileges on exposed firewalls.” — CSO Online
Takeaway: Restrict access to your firewall's User-ID Authentication Portal to trusted networks to mitigate risks.
Excerpt from the original — CSO Online
Palo Alto Networks is warning customers about a critical buffer overflow vulnerability affecting its PAN-OS user-ID authentication portal that is already being exploited in the wild.
The flaw allows attackers to execute arbitrary code with root privileges on exposed firewalls, the company said in a security advisory. PAN-OS is the software that runs all Palo Alto Networks next-generation firewalls.
“This issue is applicable only to PA-Series and VM-Series firewalls that are configured to use User-ID Authentication Portal,” the company added. “Prisma Access, Cloud NGFW, and Panorama appliances are not impacted by this vulnerability.”
The advisory noted that “limited exploitation” was seen targeting authentication portals exposed to untrusted IP addresses and the public internet. Customers restricting these portals to trusted internal networks are safe.
The issue is awaiting a …