Critical severity9.8NVD Advisory· Published Apr 12, 2016· Updated May 6, 2026

CVE-2016-3657

Description

Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of service (device crash) or possibly execute arbitrary code via an SSL VPN request.

Affected products

Paloaltonetworks/Pan Os
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*
Range: >=5.0.0,<5.0.18

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security.paloaltonetworks.com/CVE-2016-3657nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000