CVE-2020-2010

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1 through 8.1.13 PAN-OS versions 9.0 through 9.0.6

Description The issue is an OS command injection vulnerability in the PAN-OS management interface. This allows an authenticated administrator to execute arbitrary OS commands with root privileges. The vulnerability exists due to the lack of neutralization of special elements used in the OS command.

Recommendations For PAN-OS versions 7.1 through 8.1.13, update to version 8.1.14 or later. For PAN-OS versions 9.0 through 9.0.6, update to version 9.0.7 or later. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation.