False Positive? Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability

[Josh.Thompson]

Name: Network Time Protocol Daemon crypto-NAK Authentication Bypass Vulnerability Unique Threat ID: 39734

critical

CVE-2015-7871

FIRST RELEASE 612 (2016-09-14 UTC)

LAST UPDATE 612 (2016-09-14 UTC)

Anyone else seeing lots of "Threat Alerts" for this signature? Just started seeing these Threat Alerts come in from multiple PA-500's for our orginization starting around the first release date and time. (09-14-2016)

We are going to ask Palo Alto Networks Support for some additional insight.

[Josh.Thompson · Accepted solution]

UPDATE:

Palo Alto Networks Support Team has verified this is a False Positve and an update to the Threat DB will be release tomorrow morning to address this problem.