QID 730392

QID 730392: Palo Alto Networks (PAN-OS) Impact of the Samba Vulnerability (PAN-187873)

PAN OS is the software that runs all Palo Alto Networks next-generation firewalls.

The Palo Alto Networks Product Security Assurance team has evaluated the Samba CVE-2021-44142 vulnerability.

Affected Versions:

QID Detection Logic (Authenticated):

This QID looks for the vulnerable version of PAN-OS

The Palo Alto Networks Product Security Assurance team has evaluated the Samba CVE-2021-44142 vulnerability.

CVSS V3 rated as Critical - 8.8 severity.

CVSS V2 rated as Critical - 9 severity.

Solution

Refer to PAN-187873 for more information about patching this vulnerability.

Workaround:
Ensure that any exported firewall configuration files are secured and that only trusted users have firewall management access to prevent the exposure of password hashes. Using complex and secure passwords for all administrator and local user accounts makes password cracking infeasible and mitigates the impact of this issue. Switching PAN-OS software from normal mode to FIPS-CC mode ensures that appliances use secure cryptography to store hashed credentials for all local user accounts. However, when you enable FIPS-CC mode, the appliance will reset to the factory default settings and the existing configuration is removed. Documentation to enable FIPS-CC mode is available here: https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/certifications/enable-fips-and-common-criteria-support.html

Vendor References

PAN-187873 - security.paloaltonetworks.com/CVE-2021-44142

CVEs related to QID 730392

CVE-2021-44142 |

Software Advisories

Advisory ID	Software	Component	Link
PAN-187873			security.paloaltonetworks.com/CVE-2021-44142

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].