Palo Alto SSH Vulnerabilities

[Sethupathi]

Hi Team,

We are finding the below vulnerabilities being detected on Palo Alto Management SSH service :

CVE-2007-2768

CVE-2004-1653

CVE-2007-2243

CVE-2016-2183

Kindly help us in resolving the above said vulnerabilities.  Devices are running with the OS 8.0.16.

Regards,

Sethupathi M

[reaper]

it's recommended to set the management interface on a private network and add only a few allowed IP addresses to access management, to limit the attack surface of any potential bad actor some of these are for pretty old openssh version, may want to check with TAC if your scan is accurate

[jmsepulveda]

Hello, is it possible to indicate if there is any mitigation or the new versions of pan os, are they not affected by these vulnerabilities, regardless of the administrative restrictions?

[OtakarKlier]

Hello,

Running a newer recommended release are not affected by the vulnerabilities listed.

https://security.paloaltonetworks.com/

https://live.paloaltonetworks.com/t5/customer-resources/support-pan-os-software-release-guidance/ta-...

Regards,