[{"vendor":"Palo Alto Networks","product":"PAN-OS","platforms":["PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200"],"versions":[{"version":"8.1","lessThan":"8.1.18","versionType":"custom","status":"affected"},{"version":"9.0","lessThan":"9.0.12","versionType":"custom","status":"affected"},{"version":"9.1","lessThan":"9.1.5","versionType":"custom","status":"affected"}]},{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":[{"version":"10.0.*","status":"unaffected"},{"version":"8.1.18","lessThan":"8.1*","versionType":"custom","status":"unaffected"},{"version":"9.0.12","lessThan":"9.0*","versionType":"custom","status":"unaffected"},{"version":"9.1.5","lessThan":"9.1*","versionType":"custom","status":"unaffected"}]}]

https://security.paloaltonetworks.com/CVE-2021-3031

NIST CWE-212

NIST CWE-200

NIST (AV:A/AC:L/Au:N/C:P/I:N/A:N)

NIST CWE-200

AND
     OR
          *cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* versions from (including) 8.1.0 up to (excluding) 8.1.18
          *cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* versions from (including) 9.0.0 up to (excluding) 9.0.12
          *cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* versions from (including) 9.1.0 up to (excluding) 9.1.5
     OR
          cpe:2.3:h:paloaltonetworks:pa-200:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-2020:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-2050:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-220:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3020:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3050:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3060:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3220:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3250:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-3260:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-500:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-5200:-:*:*:*:*:*:*:*
          cpe:2.3:h:paloaltonetworks:pa-800:-:*:*:*:*:*:*:*

https://security.paloaltonetworks.com/CVE-2021-3031 No Types Assigned

https://security.paloaltonetworks.com/CVE-2021-3031 Vendor Advisory

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets.

This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001.
This issue impacts:
PAN-OS 8.1 version earlier than PAN-OS 8.1.18;
PAN-OS 9.0 versions earlier than PAN-OS 9.0.12;
PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets. This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001. This issue impacts: PAN-OS 8.1 version earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.