Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?

Michael_Woods — Tue, 09 Apr 2024 18:56:39 GMT

Our Tenable scans says it is, but I see no fix recommended for it (for any PAN-OS release). We have updated our ciphers to remediate CVE-2023-48795 but it also still shows up on our Tenable Nessus scan.

Re: Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?

kiwi — Tue, 16 Apr 2024 11:49:08 GMT

Hi @Michael_Woods ,

Regarding CVE-2023-51384, Palo Alto Firewall is not affected as we do not utilise the SSH agent associated with this vulnerability.

I'm guessing CVE-2023-513845 is a typo on your end and you mean CVE-2023-51385 ?
As for CVE-2023-51385, we already have coverage for this vulnerability through the Unique Threat ID: 94807. This threat has been categorised with a severity level of critical and the recommended action is set to reset-both.

To validate these assertions, you may refer to the following link: https://threatvault.paloaltonetworks.com/?query=CVE-2023-51385&type=

Kind regards,

-Kim.

topic Re: Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845? in Advanced Threat Prevention Discussions

Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?

Re: Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?