What is CVE-2020-1994?

CVE-2020-1994 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under Insecure Temporary File. CVSS score: 4.1/10. Published 2020-05-13.

How severe is CVE-2020-1994?

Medium severity. CVSS v3 base score is 4.1 out of 10.

Vulnerability in Palo Alto Networks Pan-Os

CVE-2020-1994

A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions earlier than 8.1.13; PAN-OS 9.0 versions earlier than 9.0.7.

EPSS: 0.002 (14.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.1 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N.

Affected products

Palo Alto Networks Pan-os — versions 7.1.*, 8.0.*, 8.1
Paloaltonetworks Pan-os

Weakness classification (CWE)

CWE-377 — Insecure Temporary File

References

psirt@paloaltonetworks.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1994?: CVE-2020-1994 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under Insecure Temporary File. CVSS score: 4.1/10. Published 2020-05-13.
How severe is CVE-2020-1994?: Medium severity. CVSS v3 base score is 4.1 out of 10.