Palo Alto Networks PAN-OS CVE-2019-1579 Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	109310
Class:	Unknown
CVE:	CVE-2019-1579
Remote:	Yes
Local:	No
Published:	Jul 18 2019 12:00AM
Updated:	Jul 18 2019 12:00AM
Credit:	Orange Tsai and Meh Chang
Vulnerable:	Paloaltonetworks PAN-OS 8.1.2 Paloaltonetworks PAN-OS 8.1.1 Paloaltonetworks PAN-OS 8.1 Paloaltonetworks PAN-OS 8.0.9 Paloaltonetworks PAN-OS 8.0.8 Paloaltonetworks PAN-OS 8.0.2 Paloaltonetworks PAN-OS 8.0.1 Paloaltonetworks PAN-OS 7.1.16 Paloaltonetworks PAN-OS 7.1.12 Paloaltonetworks PAN-OS 7.1.11 Paloaltonetworks PAN-OS 7.1.9 Paloaltonetworks PAN-OS 7.1.5 Paloaltonetworks PAN-OS 7.1.4 Paloaltonetworks PAN-OS 7.1.3 Paloaltonetworks PAN-OS 7.1.2 Paloaltonetworks PAN-OS 7.1.1 Paloaltonetworks PAN-OS 7.1 Paloaltonetworks PAN-OS 8.0.7 Paloaltonetworks PAN-OS 8.0.6 Paloaltonetworks PAN-OS 8.0.5 Paloaltonetworks PAN-OS 8.0.4 Paloaltonetworks PAN-OS 8.0.3 Paloaltonetworks PAN-OS 8.0.11 Paloaltonetworks PAN-OS 8.0.10 Paloaltonetworks PAN-OS 8.0 Paloaltonetworks PAN-OS 7.1.8 Paloaltonetworks PAN-OS 7.1.7 Paloaltonetworks PAN-OS 7.1.6 Paloaltonetworks PAN-OS 7.1.18 Paloaltonetworks PAN-OS 7.1.17 Paloaltonetworks PAN-OS 7.1.14 Paloaltonetworks PAN-OS 7.1.13 Paloaltonetworks PAN-OS 7.1.10
Not Vulnerable:	Paloaltonetworks PAN-OS 8.1.3 Paloaltonetworks PAN-OS 8.0.12 Paloaltonetworks PAN-OS 7.1.19

Palo Alto Networks PAN-OS CVE-2019-1579 Multiple Remote Code Execution Vulnerabilities

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Palo Alto Networks PAN-OS CVE-2019-1579 Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.