4.3

CVE-2013-5663

Exploit

The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP traffic, aka Ref ID 47195.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Paloaltonetworks ≫ Pan-os Version <= 4.0.8
Paloaltonetworks ≫ Pan-os Version4.0.0
Paloaltonetworks ≫ Pan-os Version4.0.1
Paloaltonetworks ≫ Pan-os Version4.0.2
Paloaltonetworks ≫ Pan-os Version4.0.3
Paloaltonetworks ≫ Pan-os Version4.0.4
Paloaltonetworks ≫ Pan-os Version4.0.5
Paloaltonetworks ≫ Pan-os Version4.0.6
Paloaltonetworks ≫ Pan-os Version4.0.7
Paloaltonetworks ≫ Pan-os Version4.1.0
Paloaltonetworks ≫ Pan-os Version4.1.1
Paloaltonetworks ≫ Pan-os Version4.1.2
Paloaltonetworks ≫ Pan-os Version4.1.3
Paloaltonetworks ≫ Pan-os Version4.1.4
Paloaltonetworks ≫ Pan-os Version4.1.5
Paloaltonetworks ≫ Pan-os Version4.1.6
Paloaltonetworks ≫ Pan-os Version4.1.7
Paloaltonetworks ≫ Pan-os Version4.1.8
Paloaltonetworks ≫ Pan-os Version4.1.8-h3
Paloaltonetworks ≫ Pan-os Version4.1.9
Paloaltonetworks ≫ Pan-os Version4.1.10
Paloaltonetworks ≫ Pan-os Version5.0.0
Paloaltonetworks ≫ Pan-os Version5.0.0-h1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.61% 0.688
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N