PT-2020-3479

CVE-2020-2027

Published

2020-06-10

Updated

2020-06-16

Description by

CVSS 2.0

9.0

High

MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1 through 8.1.12 PAN-OS versions 9.0 through 9.0.6

Description A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges.

Recommendations For PAN-OS versions 7.1 through 8.1.12, update to PAN-OS 8.1.13 or later. For PAN-OS versions 9.0 through 9.0.6, update to PAN-OS 9.0.7 or later.

Exploitability

Fix

Impacts

Researchers

Nicholas Newsom

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-121: Stack-based Buffer Overflow

Related identifiers

CVE-2020-2027