CVE-2020-1999— PAN-OS: Threat signatures are evaded by specifically crafted packets
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-1999
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PAN-OS: Threat signatures are evaded by specifically crafted packets
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for threats by sending data through specifically crafted TCP packets. This technique evades signature-based threat detection. This issue impacts: PAN-OS 8.1 versions earlier than 8.1.17; PAN-OS 9.0 versions earlier than 9.0.11; PAN-OS 9.1 versions earlier than 9.1.5; All versions of PAN-OS 7.1 and PAN-OS 8.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
对因果或异常条件的不恰当检查
Source: NVD (National Vulnerability Database)
Vulnerability Title
Palo Alto Networks PAN-OS 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Palo Alto Networks PAN-OS是美国Palo Alto Networks公司的一套为其防火墙设备开发的操作系统。 Palo Alto Networks PAN-OS 存在代码问题漏洞，该漏洞允许攻击者可利用该漏洞与网络中的设备通信，而不通过专门设计的TCP数据包发送数据来分析威胁。该技术避开了基于签名的威胁检测。以下产品及版本受到影响: 8.1.17之前的8.1版本，9.0.11之前的9.0版本，9.1.5之前的9.1版本，PAN-OS 7.1所有版本和PAN-OS 8.0版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Palo Alto Networks | PAN-OS | 7.1.* | - |
II. Public POCs for CVE-2020-1999
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-1999
请登录查看更多情报信息。
- https://security.paloaltonetworks.com/CVE-2020-1999x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-1999
Same Patch Batch · Palo Alto Networks · 2020-11-12 · 5 CVEs total
| CVE-2020-2050 | 8.2 HIGH | PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate ve |
| CVE-2020-2022 | 7.5 HIGH | PAN-OS: Panorama session disclosure during context switch into managed device |
| CVE-2020-2000 | 7.2 HIGH | PAN-OS: OS command injection and memory corruption vulnerability |
| CVE-2020-2048 | 3.3 LOW | PAN-OS: System proxy passwords may be logged in clear text while viewing system state |
IV. Related Vulnerabilities
Same product: PAN-OS
- CVE-2025-0116
PAN-OS: Firewall Denial of Service (DoS) Using a Specially C - CVE-2025-0115
PAN-OS: Authenticated Admin File Read Vulnerability in PAN-O - CVE-2025-0114
PAN-OS: Denial of Service (DoS) in GlobalProtect - CVE-2024-9471
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API - CVE-2024-8691
PAN-OS: User Impersonation in GlobalProtect Portal
Same vendor: Palo Alto Networks
- CVE-2026-0300
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulne - CVE-2026-0232
Cortex XDR Agent: Local Administrator can disable the agent - CVE-2026-0233
Autonomous Digital Experience Manager: Improper validation o - CVE-2026-0234
Cortex XSOAR: Improper Verification of Cryptographic Signatu - CVE-2026-0231
Cortex XDR Broker VM: Sensitive Information Disclosure Vulne
Same weakness: CWE-754
- CVE-2026-41662
Admidio: Missing Minimum Administrator Check in Role Members - CVE-2026-35225
Improper timeout handling in CODESYS EtherNetIP - CVE-2026-35366
uutils coreutils printenv Security Inspection Bypass via UTF - CVE-2026-40343
free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPos - CVE-2026-40249
free5gc UDR fail-open request handling in PolicyDataSubsToNo
V. Comments for CVE-2020-1999
No comments yet