The Firewall Root Flaw
Palo Alto Networks patched a firewall flaw that lets an authenticated attacker with network access run code as root, and reports very limited exploitation.
Key terms
AP Cybersecurity alignment
- 3.4.D.2Specific rules for a firewall can allow or deny inbound or outbound traffic based on source or destination port or IP address, service, protocol, or application.Learning objective: Configure a firewall to manage the flow of network traffic.
- 4.1.C.1Adversaries can develop exploits for known vulnerabilities in software (including operating systems). Devices with unpatched software are vulnerable to these exploits, which could allow an adversary to crash a system, view…Learning objective: Explain how adversaries can exploit common device vulnerabilities to cause loss, damage, disruption, or destruction.
- 4.3.C.1When vulnerabilities in operating systems and software are found, the vendor or organization that maintains the operating system software will fix it and send an update. A small update is called a patch.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
AP Networking alignment
- 3.4.B.1Segmented networks use security controls to reduce the impact of unauthorized access. Security controls should be implemented to follow the principle of least privilege, allowing users and devices only the minimum access…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a segmented LAN.
- 3.5.C.2A typical ACL will specify the direction of traffic on an interface (inbound or outbound), the criterion to filter by (IP addresses, logical port, service, or application), and action (permit or deny). Different firewalls will…Learning objective: Configure firewall rules for different network segments.
- 4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.