CVE-2020-1992

🗓️ 08 Apr 2020 18:41:58Reported by palo_altoType

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges

Reporter	Title	Published	Views	Family All 8
CNVD	Palo Alto Networks PAN-OS Formatting String Error Vulnerability (CNVD-2020-22957)	9 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-1992 PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation	8 Apr 202018:41	–	cvelist
EUVD	EUVD-2020-12782	7 Oct 202500:30	–	euvd
NVD	CVE-2020-1992	8 Apr 202019:15	–	nvd
OSV	CVE-2020-1992	8 Apr 202019:15	–	osv
Palo Alto Networks	PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation	8 Apr 202016:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS Series PA-7000 9.0 < 9.0.7 / 9.1 < 9.1.2 RCE	11 Jun 202000:00	–	nessus
Prion	Format string	8 Apr 202019:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange9.0.0–9.0.7

paloaltonetworks pan-osRange9.1.0–9.1.2

AND

paloaltonetworks pa-7050Match-

paloaltonetworks pa-7080Match-

[
  {
    "platforms": [
      "PA-7000 series with LFC"
    ],
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "9.0.7",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.7",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.1.2",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.1.2",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.1.*"
      },
      {
        "status": "unaffected",
        "version": "8.0.*"
      },
      {
        "status": "unaffected",
        "version": "7.1.*"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2020-1992

21 Nov 2024 05:11Current

9High risk

Vulners AI Score9

CVSS 29.3

CVSS 3.18.1 - 9.8

EPSS0.0205

CWE-134