← CVE Radar
CVE-2019-1579Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.
8.1 HIGHEPSS 44.15%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.1 | HIGH | 3.1NVD | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 6.8 | MEDIUM | 2.0NVD | AV:N/AC:M/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Jul 10, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2019-1579
- Status
- Analyzed
- Assigner (CNA)
- palo_alto
- Published
- Jul 19, 2019
- Last modified
- 2026-10-02 04:18 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
Palo Alto Networks GlobalProtect Portal/Gateway Interface1 version range
- PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier, and PAN-OS 8.1.2 and earlier releases
References
- securityfocus.com http://www.securityfocus.com/bid/109310
- devco.re https://devco.re/blog/2019/07/17/attacking-ssl-vpn-part-1-PreAuth-RCE-on-Palo-Alto-GlobalProtect-with-Uber-as-case-study/
- psirt.global.sonicwall.com https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0010
- security.paloaltonetworks.com https://security.paloaltonetworks.com/CVE-2019-1579
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1579