Critical · published May 13, 2020
🚨 An authentication bypass vulnerability is lurking in Panorama's context switching feature! An attacker with network access could waltz in and gain privileged access to your firewalls. 🔥 Think of it like a hotel receptionist who doesn’t verify guest identities before handing out room keys — anyone knowledgeable enough about the setup could stroll into the VIP lounge without a reservation. If exploited, an attacker could gain unauthorized control over managed firewalls, leading to a catastrophic breach of sensitive data and network security. This is not just a small oversight — it’s a wide-open door for potential chaos!
Think of it like a hotel receptionist who doesn’t verify guest identities before handing out room keys — anyone knowledgeable enough about the setup could stroll into the VIP lounge without a reservation. This CVE allows attackers with network access to bypass authentication through Panorama's context switching, granting them privileged access to managed firewalls without valid credentials.
If exploited, an attacker could gain unauthorized control over managed firewalls, leading to a catastrophic breach of sensitive data and network security. This is not just a small oversight — it’s a wide-open door for potential chaos! To protect your network, immediately update to PAN-OS 7.1.26, 8.1.12, or 9.0.6, and ensure that custom certificates are configured for Panorama communication with managed devices. Don’t wait — secure your firewalls today! You've got this! Follow these steps, and you'll secure your environment in no time. 🛡️