PT-2020-3410

CVE-2020-1990

Published

2020-04-08

Updated

2020-04-09

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 8.1.0 through 8.1.12 Palo Alto Networks PAN-OS versions 9.0.0 through 9.0.6

Description A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges.

Recommendations For versions 8.1.0 through 8.1.12, update to version 8.1.13 or later. For versions 9.0.0 through 9.0.6, update to version 9.0.7 or later.

Exploitability

Fix

Impacts

Researchers

Nicholas Newsom

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-121: Stack-based Buffer Overflow

Related identifiers

CVE-2020-1990