CVE-2020-1990: PAN-OS: Buffer overflow in the management server
Vulnerability summary
CVE-2020-1990 is a high (CVSS 9.0) Stack-based Buffer Overflow vulnerability in palo alto networks pan-os. EPSS estimates a 2.13% chance of exploitation in the next 30 days, higher than 81.8% of scored vulnerabilities.
Timeline
- 08-04-2020PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 8.1 versions before 8.1.13; 9.0 versions before 9.0.7. This issue does not affect PAN-OS 7.1.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.2HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.13%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.13% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Palo alto networks1 product
- pan-os≥ 8.1, < 8.1.13 | ≥ 9.0, < 9.0.7
Paloaltonetworks1 product
- pan-os≥ 8.1.0, < 8.1.13 | ≥ 9.0.0, < 9.0.7
2 vendors · 2 products