What is CVE-2020-1999?

CVE-2020-1999 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.3/10. Published 2020-11-12.

How severe is CVE-2020-1999?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Palo Alto Networks Pan-Os

CVE-2020-1999

A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packets. This technique evades signature-based threat detection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.1 versions earlier than 9.1.5; All versions of PAN-OS 7.1 and PAN-OS 8.0.

EPSS: 0.013 (67.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Palo Alto Networks Pan-os — versions 7.1.*, 8.0.*, 10.0.*
Paloaltonetworks Pan-os

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

psirt@paloaltonetworks.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1999?: CVE-2020-1999 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.3/10. Published 2020-11-12.
How severe is CVE-2020-1999?: Medium severity. CVSS v3 base score is 5.3 out of 10.