In the CVE 2023-48795
The Terrapin attack allows an attacker with the ability to intercept SSH traffic on the PAN-OS management network (machine-in-the-middle or MitM attacks) to downgrade connection security and force the usage of less secure client authentication algorithms when an administrator connects to PAN-OS software.
