CVE-2020-1995

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 9.1.2

Description A NULL pointer dereference issue allows an authenticated administrator to send a request that causes the rasmgr daemon to crash, resulting in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode.

Recommendations For versions prior to 9.1.2, update to version 9.1.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the rasmgr daemon to minimize the risk of exploitation.