CVE-2020-2003

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1 through 8.0 PAN-OS 8.1 versions prior to 8.1.14 PAN-OS 9.0 versions prior to 9.0.7 PAN-OS 9.1 versions prior to 9.1.1

Description An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files, affecting the integrity of the system or causing denial of service to all PAN-OS services.

Recommendations For PAN-OS versions 7.1 through 8.0, update to a version after 8.0. For PAN-OS 8.1 versions prior to 8.1.14, update to version 8.1.14 or later. For PAN-OS 9.0 versions prior to 9.0.7, update to version 9.0.7 or later. For PAN-OS 9.1 versions prior to 9.1.1, update to version 9.1.1 or later.