VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2020· Updated Sep 17, 2024

PAN-OS: Threat signatures are evaded by specifically crafted packets

CVE-2020-1999

Description

A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packets. This technique evades signature-based threat detection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.1 versions earlier than 9.1.5; All versions of PAN-OS 7.1 and PAN-OS 8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Paloaltonetworks/Pan OSllm-fuzzy2 versions
    8.1 <8.1.17, 9.0 <9.0.11, 9.1 <9.1.5, 7.1 and 8.0 all+ 1 more
    • (no CPE)range: 8.1 <8.1.17, 9.0 <9.0.11, 9.1 <9.1.5, 7.1 and 8.0 all
    • (no CPE)range: 7.1.*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.