VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 9, 2020· Updated Sep 16, 2024

PAN-OS: Buffer overflow when Captive Portal or Multi-Factor Authentication (MFA) is enabled

CVE-2020-2040

Description

A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to the Captive Portal or Multi-Factor Authentication interface. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Paloaltonetworks/Pan OSllm-fuzzy2 versions
    >=8.0.0 <8.1.15, >=9.0.0 <9.0.9, >=9.1.0 <9.1.3+ 1 more
    • (no CPE)range: >=8.0.0 <8.1.15, >=9.0.0 <9.0.9, >=9.1.0 <9.1.3
    • (no CPE)range: 8.0.*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.