topic Re: CVE-2024-3393 - Panorama Patch in Panorama Discussions

CVE-2024-3393 - Panorama Patch

David_Tolo — Mon, 30 Dec 2024 19:52:40 GMT

I have several panorama managed firewalls

I have applied the work around and want to patch them to 10.2.10 - h12.

But there is no patch for Panorama, my concern is that Panorama is supposed to be higher than the managed firewalls.

Re: CVE-2024-3393 - Panorama Patch

mshekh — Tue, 31 Dec 2024 01:12:04 GMT

Hi @David_Tolo ,

Yes Panorama should be higher or at the same version which your firewalls are running.

Additionally Panorama is not impacted with this CVE-2024-3393. No patch is required for Panorama.

Re: CVE-2024-3393 - Panorama Patch

ozheng — Tue, 31 Dec 2024 05:29:13 GMT

Hello @David_Tolo and @mshekh ,

Actually the requirement is on the software version, not on the maintenance release.

You can have a Panorama running on 10.2.4 managing devices running on 10.2.10-h12.
(the configuration syntax usually should not change within a version, so Panorama can perform push with no issue to firewall)

Olivier

Re: CVE-2024-3393 - Panorama Patch

David_Tolo — Thu, 02 Jan 2025 12:34:56 GMT

Thanks All