CVE-2020-2039CWE-400

PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

Medium · published September 9, 2020

CVSS v3.1
5.3
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the availability of the management web interface by repeatedly uploading files until available disk space is exhausted. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.46383 · 98.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2020-09-09T16:45Z
EPSS history
Timeline
  • 09 SEP 16:45Z
    PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload
    cvelistv5