CVE-2020-1999CWE-754

PAN-OS: Threat signatures are evaded by specifically crafted packets

Medium · published November 12, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packets. This technique evades signature-based threat detection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.1 versions earlier than 9.1.5; All versions of PAN-OS 7.1 and PAN-OS 8.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2020-11-12T00:05Z
EPSS history
Timeline
  • 12 NOV 00:05Z
    PAN-OS: Threat signatures are evaded by specifically crafted packets
    cvelistv5