CVE-2020-1979

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13 on Panorama. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-134

Affected software

Vendor	Product	Versions
Palo Alto Networks	PAN-OS	>= 8.1, < 8.1.13

References

https://security.paloaltonetworks.com/CVE-2020-1979Vendor Advisory
https://security.paloaltonetworks.com/CVE-2020-1979Vendor Advisory

Timeline

Published: Mar 11, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-19807.8A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate priv CVE-2020-198029.8File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type paramete CVE-2020-198038.8Cross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the background CVE-2020-19817.8A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed CVE-2020-19824.8Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, which is known to be a cryptographically weak p CVE-2020-198218.8A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.CVE-2020-198227.2A remote code execution (RCE) vulnerability in template_user.php of ZZCMS version 2018 allows attackers to execute arbitrary PHP code via th CVE-2020-198247.0An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.CVE-2020-198259.6Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain es CVE-2020-19836.5A use after free vulnerability in ip_reass() in ip_input.c of libslirp 4.2.0 and prior releases allows crafted packets to cause a denial of CVE-2020-19847.8Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data'CVE-2020-19857.8Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and ga