CVE-2021-3060

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol (SCEP) feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The attacker must have network access to the GlobalProtect interfaces to exploit this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20-h1; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14-h3; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11-h2; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 10.1 versions earlier than PAN-OS 10.1.3. Prisma Access customers with Prisma Access 2.1 Preferred and Prisma Access 2.1 Innovation firewalls are impacted by this issue.

• CWE-78
• CWE-78

• https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/certificate-management/configure-the-master-key.htmlVendor Advisory
• https://docs.paloaltonetworks.com/prisma/prisma-access/innovation/2-1/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/get-started-with-prisma-access-overview.htmlVendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3060Vendor Advisory
• https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/certificate-management/configure-the-master-key.htmlVendor Advisory
• https://docs.paloaltonetworks.com/prisma/prisma-access/innovation/2-1/prisma-access-panorama-admin/prepare-the-prisma-access-infrastructure/get-started-with-prisma-access-overview.htmlVendor Advisory
• https://security.paloaltonetworks.com/CVE-2021-3060Vendor Advisory

Published

Nov 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30593Out of bounds read in Tab Strip in Google Chrome prior to 92…8.1
• CVE-2021-30594Use after free in Page Info UI in Google Chrome prior to 92.…6.8
• CVE-2021-30596Incorrect security UI in Navigation in Google Chrome on Andr…4.3
• CVE-2021-30597Use after free in Browser UI in Google Chrome on Chrome prio…6.8
• CVE-2021-30598Type confusion in V8 in Google Chrome prior to 92.0.4515.159…8.8
• CVE-2021-30599Type confusion in V8 in Google Chrome prior to 92.0.4515.159…8.8
• CVE-2021-30600Use after free in Printing in Google Chrome prior to 92.0.45…8.8
• CVE-2021-30601Use after free in Extensions API in Google Chrome prior to 9…8.8
• CVE-2021-30602Use after free in WebRTC in Google Chrome prior to 92.0.4515…8.8
• CVE-2021-30603Data race in WebAudio in Google Chrome prior to 92.0.4515.15…7.5
• CVE-2021-30604Use after free in ANGLE in Google Chrome prior to 92.0.4515.…8.8
• CVE-2021-30605Inappropriate implementation in the ChromeOS Readiness Tool …7.8