CVE-2020-2002

CVE-2020-2002 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS, affecting versions 7.1, 8.0, 8.1, and 9.0. It allows a man-in-the-middle attacker to spoof Kerberos authentication, enabling unauthorized administrative access to PAN-OS. The vulnerability has a CVSS score of 8.1 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, but requiring high attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion and media coverage, suggesting awareness and potential interest from threat actors.