Vulnerabilities · 189 days ago

PAN‑OS, Prisma SD‑WAN SSH Downgrade Exposes Admin Sessions

PAN‑OS and Prisma SD‑WAN ION devices are affected by Terrapin (CVE-2023-48795). An attacker intercepting SSH traffic can downgrade client connections to force weaker client-auth algorithms and expose administrative sessions; vendor rates severity Medium.

Timeline

• Mar 10 Reported by Palo Alto Networks Advisories

Sources

1 source covering this story

• Palo Alto Networks Advisories Mar 10

  CVE-2023-48795 Impact of Terrapin SSH Attack

  The Terrapin attack allows an attacker with the ability to intercept SSH traffic on affected Palo Alto Networks products (through machine-in-the-middle or MitM attacks) to downgrade connection securit...

Entities

• CVE-2023-48795

Vendor digest: Palo Alto Networks

Part of the PlainSec briefing for 2026-03-10

Editions

• Briefing for 2026-03-10

Related stories

• UAT-8616 activity affects Cisco Catalyst SD-WAN Controller
• Attackers Weaponize New RCEs to Compromise Cloud Environments
• March Patch Tuesday Fixes Critical Microsoft Cloud Vulnerabilities