8.1.12

DATE	CVE	VULNERABILITY TITLE	RISK
2020-04-08	CVE-2020-1990	Out-of-bounds Write vulnerability in Paloaltonetworks Pan-Os A stack-based buffer overflow vulnerability in the management server component of PAN-OS allows an authenticated user to upload a corrupted PAN-OS configuration and potentially execute code with root privileges. network low complexity paloaltonetworks CWE-787 critical	9.0
2020-03-11	CVE-2020-1981	Exposure of Resource to Wrong Sphere vulnerability in Paloaltonetworks Pan-Os A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. local low complexity paloaltonetworks CWE-668	7.2
2020-03-11	CVE-2020-1980	OS Command Injection vulnerability in Paloaltonetworks Pan-Os A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. local low complexity paloaltonetworks CWE-78	7.2
2020-03-11	CVE-2020-1979	Use of Externally-Controlled Format String vulnerability in Paloaltonetworks Pan-Os A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Panorama management interfaces to execute arbitrary code, bypassing the restricted shell and escalating privileges. local low complexity paloaltonetworks CWE-134	4.6