CVE-2021-3031

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets. This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001. This issue impacts: PAN-OS 8.1 version earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200CWE-212

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-303107.5Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, CVE-2021-303117.8Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, CVE-2021-303127.5Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, CVE-2021-303136.4Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, SnaCVE-2021-303145.5Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon CompuCVE-2021-303157.8Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon AutoCVE-2021-303167.8Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, SCVE-2021-303177.8Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute,CVE-2021-303187.8Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2021-303197.8Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, SnapdragoCVE-2021-30324.4An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “httCVE-2021-303219.8Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, S
CVE-2021-3031: Medium severity, CVSS 4.3 | Vulnix