<p>A buffer overflow vulnerability in the User-ID™ Authentication Portal
(aka Captive Portal) service of Palo Alto Networks PAN-OS software
allows an unauthenticated attacker to execute arbitrary code with root
privileges on the PA-Series and VM-Series firewalls by sending specially
crafted packets.</p>
<p>Siemens is preparing fix versions and recommends countermeasures for
products where fixes are not, or not yet available. Customers are
advised to consult and implement the workarounds provided in Palo Alto
Networks’ upstream security notifications.</p>
<p>[1] https://security.paloaltonetworks.com/</p>
Source link
