Skip to content
OpenAdvisories
High · 7.8 CVE-2020-1980 EUVD-2020-12770GHSA-qqvw-2w25-wwh8

PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands

Published Mar 11, 2020 · Updated Sep 16, 2024 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: PAN-OS Category: Network devices

Description

A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 8.1 < 8.1.13, 8.1 !>= 8.1.13, 9.0 !>= 9.0.0, 7.1 !>= 7.1.0, 9.1 !>= 9.1.0 —

References