Lucene search

Palo Alto Networks Product Security Incident Response TeamPA-CVE-2021-28041

HistoryMar 24, 2021 - 8:50 p.m.

PAN-OS: Informational: Impact of the OpenSSH vulnerability CVE-2021-28041

2021-03-2420:50:00

Palo Alto Networks Product Security Incident Response Team

securityadvisories.paloaltonetworks.com

174

palo alto networks

openssh vulnerability

cve-2021-28041

pan-os software

ssh-agent

exploitation

security assurance

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.8%

JSON

The Palo Alto Networks Product Security Assurance team has evaluated the OpenSSH software CVE-2021-28041 vulnerability.

PAN-OS software does not utilize the ssh-agent component or provide access to the agent socket related to this vulnerability. There are no scenarios that enable successful exploitation of the vulnerability in PAN-OS software.

Work around:
No work around available.

References

cve.mitre.org/cgi-bin/cvename.cgi?name=2021-28041

security.paloaltonetworks.com/CVE-2021-28041

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.8%

JSON

Related for PA-CVE-2021-28041