Palo Alto Networks fixes another severe vulnerability found in the PAN-OS GlobalProtect portal. The vulnerability allows unauthenticated remote attackers to execute arbitrary OS commands with root privileges on unpatched PAN next-generation firewalls. The issue affects devices with GlobalProtect portals enabled, but only those with the portal’s GlobalProtect feature is not affected by the flaw. Attackers need additional knowledge about the configuration of an impacted firewall or perform brute-force attacks to exploit this issue, according to an analyst.
Source: https://www.bleepingcomputer.com/news/security/palo-alto-networks-fixes-another-severe-flaw-in-pan-os-devices/