CVE-2024-3393 - Panorama Patch

[David_Tolo]

I have several panorama managed firewalls

I have applied the work around and want to patch them to 10.2.10 - h12.

But there is no patch for Panorama, my concern is that Panorama is supposed to be higher than the managed firewalls.

[mshekh]

Hi @David_Tolo ,

Yes Panorama should be higher or at the same version which your firewalls are running.

Additionally Panorama is not impacted with this CVE-2024-3393. No patch is required for Panorama.

[ozheng · Accepted solution]

Hello @David_Tolo and @mshekh ,

Actually the requirement is on the software version, not on the maintenance release.

You can have a Panorama running on 10.2.4 managing devices running on 10.2.10-h12.
(the configuration syntax usually should not change within a version, so Panorama can perform push with no issue to firewall)

Olivier

[David_Tolo]

Thanks All