https://insinuator.net/tags/ngfw/ Recent content in NGFW on Insinuator.net - Bold Statements Hugo en-us Mon, 28 Mar 2016 00:00:00 +0000 https://insinuator.net/2016/03/attacking-next-generation-firewalls/ Mon, 28 Mar 2016 00:00:00 +0000 https://insinuator.net/2016/03/attacking-next-generation-firewalls/ <p>Felix Wilhelm presented in his talk various ways to attack his new target – The PA-500 which is produced by Palo Alto Networks.</p> <p>He discovered vulnerabilities in 3 different exposed aspects of the device. The first vulnerability occurred inside of an unauthenticated API from the Management-Website which could only be accessed within the Admin Network. This vulnerability was a typical off-by-one Command Injection, which could be abused by reaching out to the API with a special client=wget Request.</p>