HC3 Sector Alert TLP White: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication, June 30, 2020

On June 29, 2020, Palo Alto Networks announced a vulnerability (CVE-2020-2021) affecting their PAN-OS firewall software. The vulnerability has a 10/10 CVSSv3 score which “means the vulnerability is both easy to exploit as it doesn't require advanced technical skills, and it's remotely exploitable via the internet, without requiring attackers to gain an initial foothold on the attacked device.” Also on June 29, USCYBERCOM Cybersecurity Alert (@CNMF_CyberAlert) tweeted that they expected “Foreign APTs will likely attempt exploit soon.