What coverage can the Palo Alto firewall provide for CVE-2021-41379?
1695
Created On 03/08/22 16:26 PM - Last Modified 06/26/25 01:13 AM
Question
What coverages can the Palo Alto firewall provide for CVE-2021-41379?
Environment
- Palo Alto Networks NGFW (Strata)
- Supported PAN-OS.
- CVE-2021-41379.
Answer
CVE-2021-41379:
- Windows Installer Elevation of Privilege Vulnerability, also known as CVE-2021-41379, is a locally exploitable vulnerability affecting the Windows Platform.
- As this is a local exploit, a network IPS signature would not provide coverage.
- Palo Alto networks firewall does provide coverage of some of the malicious samples associated with the CVE-2021-41379 via WildFire and Antivirus package.
- Signature for malicious samples associated with the CVE can be found at https://threatvault.paloaltonetworks.com/?query=451132454