topic Re: Palo Alto SSH Vulnerabilities in General Topics

Palo Alto SSH Vulnerabilities

Sethupathi — Wed, 17 Jul 2019 12:00:49 GMT

Hi Team,

We are finding the below vulnerabilities being detected on Palo Alto Management SSH service :

Kindly help us in resolving the above said vulnerabilities. Devices are running with the OS 8.0.16.

Regards,

Sethupathi M

Re: Palo Alto SSH Vulnerabilities

reaper — Wed, 17 Jul 2019 14:07:04 GMT

it's recommended to set the management interface on a private network and add only a few allowed IP addresses to access management, to limit the attack surface of any potential bad actor some of these are for pretty old openssh version, may want to check with TAC if your scan is accurate

Re: Palo Alto SSH Vulnerabilities

jmsepulveda — Wed, 28 Jul 2021 17:01:02 GMT

Hello, is it possible to indicate if there is any mitigation or the new versions of pan os, are they not affected by these vulnerabilities, regardless of the administrative restrictions?

Re: Palo Alto SSH Vulnerabilities

OtakarKlier — Wed, 28 Jul 2021 22:01:16 GMT

Hello,

Running a newer recommended release are not affected by the vulnerabilities listed.

https://security.paloaltonetworks.com/

https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-p/258304

Regards,