Loading the path…
Loading the Northline workspace…
Loading the path…
The firewall is on an affected PAN-OS build and answers management from the WAN. Proof is a version check, not an exploit.
Patch the edge appliance and close WAN management
Upgrade past the affected PAN-OS build and take the management interface off the internet.
No credentials. Safe probes only.
The login page is on the internet.
host: vpn.northline.example:443 service: management interface source: internet login page returned Palo Alto logged the probe. It did not block it.
Fix. Restrict management to the jump network. Pair this with the firmware upgrade.
Open weaknessPAN-OS 10.2.8 is in the affected range.
host: vpn.northline.example address: 203.0.113.20 banner: PAN-OS 10.2.8 CVE-2024-3400: version is in the affected range safe probe only — no payload was sent management plane answered from the WAN
Fix. Upgrade the appliance and remove WAN management. The version check is the proof, not an exploit.
Open weaknessA public issue on this build can reach the management plane. Nothing was executed.
Found on PT-1836.