VulnerabilitycriticalExploited in the wild

Week in review: Critical RCE in Palo Alto Networks firewalls, how to select a DRaaS solution

Help Net Securityby @helpnetsecurityNov 14, 2021 · 00:00 UTC (Nov 14, 2021)6 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-3064 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-3064 CVE-2021-42321 CVE-2021-42292

Tags: cve-2021-3064 cve-2021-42321 cve-2021-42292 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-3064	A memory corruption vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based…	9.8	20%		Nov 10, 2021
CVE-2021-42292	Security Feature Bypass in Microsoft Excel Enables Arbitrary Code Execution	7.8	43%	KEV	Nov 10, 2021 KEV Nov 17, 2021
CVE-2021-42321	Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server	8.8	92%	KEVRansomwarePoC ×2	Nov 10, 2021 KEV Nov 17, 2021

From the original article

6 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Critical RCE in Palo Alto Networks (PAN) firewalls revealed, patch ASAP!

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.