DoS in Palo Alto Networks PAN-OS GlobalProtect Gateway and Portal

Successful exploitation causes loss of availability on the affected firewall. An attacker can disrupt GlobalProtect services and firewall traffic processing, and repeated exploitation attempts can push the firewall into maintenance mode, effectively interrupting remote access and broader network connectivity until administrative recovery actions are taken.

No workaround is currently available. The only effective mitigation identified is prompt installation of the vendor-provided fixes. Organizations should prioritize externally exposed GlobalProtect-enabled deployments and reduce exposure of vulnerable services until patching is completed.

Apply Palo Alto Networks security updates to a fixed PAN-OS or Prisma Access release. Fixed versions identified include PAN-OS 12.1.3-h3 and later or 12.1.4 and later, 11.2.4-h15 and later, 11.2.7-h8 and later, 11.2.10-h2 and later, 11.1.4-h27 and later, 11.1.6-h23 and later, 11.1.10-h9 and later, 11.1.13 and later, 10.2.7-h32 and later, 10.2.10-h30 and later, 10.2.13-h18 and later, 10.2.16-h6 and later, 10.2.18-h1 and later, 10.1.14-h20 and later, Prisma Access 11.2.7-h8 and later, and Prisma Access 10.2.10-h29 and later. Unsupported releases should be upgraded to a supported fixed version.