Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-2011 Details

Description

An improper input validation vulnerability in the configuration daemon of Palo Alto Networks PAN-OS Panorama allows for a remote unauthenticated user to send a specifically crafted registration request to the device that causes the configuration service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS Panorama services by restarting the device and putting it into maintenance mode. This issue affects: All versions of PAN-OS 7.1, PAN-OS 8.0; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7; PAN-OS 9.1 versions earlier than 9.1.0.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://security.paloaltonetworks.com/CVE-2020-2011 CVEVendor Advisory
https://security.paloaltonetworks.com/CVE-2020-2011 [email protected]Vendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-20Improper Input Validation[email protected]
CWE-20Improper Input Validation[email protected]

Affected Products

ProductVersions
paloaltonetworks pan-os
>= 7.1.0, <= 7.1.26
>= 8.0.0, <= 8.0.20
>= 8.1.0, < 8.1.14
>= 9.0.0, < 9.1.0

CPE

  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-2011
NVD Published Date:
May 13, 2020
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-2011 Details - Not Deferred