CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

Medium 4.3 Published 13 Jan 2021 Updated 16 Sep 2024

An attacker on the same subnet can read sensitive memory data leaked via uncleared Ethernet padding bytes in Palo Alto firewalls.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-3031?

CVE-2021-3031 is a medium-severity vulnerability in Paloaltonetworks Pan-Os, published on 13 Jan 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets. This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001. This issue impacts: PAN-OS 8.1 version earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.

Weakness: CWE-212, CWE-200

Which versions are affected by CVE-2021-3031?

It affects 1 product.

Products include Paloaltonetworks Pan-Os.

How do I fix CVE-2021-3031?

No fix has been published for CVE-2021-3031 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-3031 being exploited?

There is no known exploitation of CVE-2021-3031 in the wild and no public exploit code.

All Paloaltonetworks Pan-Os vulnerabilities

Sources

Also known as GHSA-v97c-wm3x-xr3x.