What if my global protect client version is 5.2.7 got affected due to vulnerability CVE-2021-3057 ?

ShraddhaN_13 — Thu, 14 Oct 2021 06:39:18 GMT

As per client requirement, I checked that client has global protect client version 5.2.7. Now According to CVE-2021-3057 Vulnerability this version got affected. If I will update the current version from 5.2.7 to 5.2.8 then this vulnerability not affected.

But according to PANOS release guidance, global protect version 5.2.8 is under monitor. So in this case What will I suggest the customer?

Should I went for global protect client version upgradation? Or should I wait to get 5.2.8 this version stable?

For CVE-2021-3057 vulnerability, Link is provided below

CVE-2021-3057 GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway (paloaltonetworks.com)

topic What if my global protect client version is 5.2.7 got affected due to vulnerability CVE-2021-3057 ? in GlobalProtect Discussions

What if my global protect client version is 5.2.7 got affected due to vulnerability CVE-2021-3057 ?