PT-2020-15261

CVE-2020-2037

·

Published

2020-09-09

·

Updated

2021-02-15

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PAN-OS versions earlier than 8.1.16 PAN-OS versions earlier than 9.0.10 PAN-OS versions earlier than 9.1.3
Description The issue is an OS Command Injection vulnerability in the PAN-OS management interface. It allows authenticated administrators to execute arbitrary OS commands with root privileges.
Recommendations For PAN-OS 8.1 versions earlier than 8.1.16, update to version 8.1.16 or later. For PAN-OS 9.0 versions earlier than 9.0.10, update to version 9.0.10 or later. For PAN-OS 9.1 versions earlier than 9.1.3, update to version 9.1.3 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
Related identifiers
CVE-2020-2037
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com