important · Edge — PAN-OS
Unauthenticated XML traffic can execute code as root on PA-Series firewalls.
Affects
PAN-OS on Palo Alto Networks PA-Series hardware firewalls; the same flaw produces denial of service rather than root execution on VM-Series.
A management web or dataplane interface is enough to reach the XML-processing out-of-bounds write, and no special configuration is required.
Detail and 2 sources
Fixed PAN-OS branches are available, although pre-fix images remain accepted.