CVE-2020-1979
High
Description
A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13 on Panorama. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Paloaltonetworks Pan-os
PublishedMar 11, 2020
First seenMar 11, 2020
Weakness typeCWE-134CWE-134
How to fix
Update
- paloaltonetworks pan-os8.1.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | v < 8.1.13 | 8.1.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.