A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to the Captive Portal or Multi-Factor Authentication interface. This issue impacts: All versions of PAN-OS 8.0; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2040
Reference (s):
- https://security.paloaltonetworks.com/CVE-2020-2040
- URL: https://security.paloaltonetworks.com/CVE-2020-2040