CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets. This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001. This issue impacts: PAN-OS 8.1 version earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.

• CWE-200
• CWE-212

• https://security.paloaltonetworks.com/CVE-2021-3031Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3031Vendor Advisory

Published

Jan 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30304Possible buffer out of bound read can occur due to improper …9.1
• CVE-2021-30305Possible out of bound access due to lack of validation of pa…7.8
• CVE-2021-30306Possible buffer over read due to improper buffer allocation …7.1
• CVE-2021-30307Possible denial of service due to improper validation of DNS…7.5
• CVE-2021-30308Possible buffer overflow while printing the HARQ memory part…7.8
• CVE-2021-30309Improper size validation of QXDM commands can lead to memory…7.8
• CVE-2021-30310Possible buffer overflow due to Improper validation of recei…7.5
• CVE-2021-30311Possible heap overflow due to lack of index validation befor…7.8
• CVE-2021-30312Improper authentication of sub-frames of a multicast AMSDU f…7.5
• CVE-2021-30313Use after free condition can occur in wired connectivity due…6.4
• CVE-2021-30314Lack of validation for third party application accessing the…5.5
• CVE-2021-30315Improper handling of sensor HAL structure in absence of sens…7.8