CVE-2020-1995: Palo Alto Networks PAN-OS

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue affects: PAN-OS 9.1 versions earlier than 9.1.2.

Affected products

• Palo Alto Networks PAN-OS: from 9.1.0, before 9.1.2 (fixed in 9.1.2)

Published 2020-05-13. Last modified 2026-06-17.