2 lines
4.9 KiB
JSON
2 lines
4.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"10.1.*"},{"status":"unaffected","version":"8.1.*"},{"changes":[{"at":"9.0.14","status":"unaffected"}],"lessThan":"9.0.14","status":"affected","version":"9.0","versionType":"custom"},{"changes":[{"at":"9.1.9","status":"unaffected"}],"lessThan":"9.1.9","status":"affected","version":"9.1","versionType":"custom"},{"changes":[{"at":"10.0.5","status":"unaffected"}],"lessThan":"10.0.5","status":"affected","version":"10.0","versionType":"custom"}]}],"source":"psirt@paloaltonetworks.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"E9EE274A-3AF1-4204-B43D-1EA54C6442CC","versionEndExcluding":"9.0.14","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"5075D342-EE42-4659-BD55-2D9FE7496C34","versionEndExcluding":"9.1.9","versionStartIncluding":"9.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"2E92DFB1-AD67-4FF8-9722-200630EA490A","versionEndExcluding":"10.0.5","versionStartIncluding":"10.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall remains otherwise functional. If the firewall then restarts, it results in a denial-of-service (DoS) condition and the firewall stops processing traffic. This issue impacts: PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.5. PAN-OS 8.1 and PAN-OS 10.1 versions are not impacted."},{"lang":"es","value":"Determinadas entradas de URL no válidas contenidas en una lista dinámica externa (EDL) hacen que el demonio del servidor de dispositivos (devsrvr) deje de responder. Esta situación causa que fallen las confirmaciones posteriores en el firewalls e impide a los administradores llevar a cabo confirmaciones y cambios de configuración, aunque el firewalls siga siendo funcional. Si el firewalls se reinicia, se produce una condición de denegación de servicio (DoS) y el firewalls deja de procesar el tráfico. Este problema afecta a: PAN-OS versiones 9.0 anteriores a PAN-OS 9.0.14; PAN-OS versiones 9.1 anteriores a PAN-OS 9.1.9; PAN-OS versiones 10.0 anteriores a PAN-OS 10.0.5. Versiones PAN-OS 8.1 y PAN-OS 10.1 no están afectadas"}],"id":"CVE-2021-3048","lastModified":"2026-06-17T04:04:37.820","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":8.6,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-08-11T17:15:07.593","references":[{"source":"psirt@paloaltonetworks.com","tags":["Broken Link"],"url":"https://security.paloaltonetworks.com/CVE-2020-3048"},{"source":"nvd@nist.gov","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2021-3048"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"url":"https://security.paloaltonetworks.com/CVE-2020-3048"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}
|