CVE-2019-1579KEV · OVERDUECWE-134

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

High · published July 20, 2019

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.1. It is confirmed in active exploitation. It sits in the 98.8th percentile for exploit probability.

1566
days past CISA
deadline
CVSS v3.1
8.1
EPSS
46%
Percentile
98.8
In the wild
Confirmed
What it is

🚨 An unauthenticated attacker can execute arbitrary code on vulnerable PAN-OS versions! This is a critical flaw waiting for the wrong click. 🔥 Think of it like a hotel receptionist who lets anyone into a secure area without checking ID — once inside, they can access everything from guest lists to safe contents without a trace. If exploited, an attacker could gain full control over the affected system, potentially compromising sensitive data and network security. This could lead to devastating breaches, data theft, or even full network takeover. The stakes are alarmingly high!

Put simply

Think of it like a hotel receptionist who lets anyone into a secure area without checking ID — once inside, they can access everything from guest lists to safe contents without a trace. CVE-2019-1579 is a remote code execution vulnerability in PAN-OS versions 7.1.18 and earlier, 8.0.11-h1 and earlier, and 8.1.2 and earlier, which allows an unauthenticated remote attacker to execute malicious code via the GlobalProtect Portal or Gateway interface.

What to do

If exploited, an attacker could gain full control over the affected system, potentially compromising sensitive data and network security. This could lead to devastating breaches, data theft, or even full network takeover. The stakes are alarmingly high! Immediately upgrade PAN-OS to version 7.1.19 or later, 8.0.12 or later, or 8.1.3 or later to eliminate this vulnerability. Additionally, review and tighten access controls to critical interfaces to prevent unauthorized access. Don't wait! You've got this! With these steps, you'll be on your way to securing your network in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.46239 · 98.8th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2019-07-20T02:15Z
KEV added
2022-01-10 · due 2022-07-10
Affected products (3)
ProductVersionsFixed in
paloaltonetworks/pan-os< 7.1.197.1.19
paloaltonetworks/pan-os≥ 8.0.0, < 8.0.128.0.12
paloaltonetworks/pan-os≥ 8.1.0, < 8.1.38.1.3
References (9)
EPSS history
Timeline
  • 10 JAN 00:00Z
    Added to CISA KEV — remediate by Jul 10
    kev
  • 19 JUL 21:12Z
    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect…
    cvelistv5