Skip to content
OpenAdvisories
High · 7.2 CVE-2020-2007 EUVD-2020-22035GHSA-c59p-qfxj-cxm7

PAN-OS: OS command injection in management server

Published May 13, 2020 · Updated Sep 17, 2024 · Assigned by palo_alto

Description

An OS command injection vulnerability in the management server component of PAN-OS allows an authenticated user to potentially execute arbitrary commands with root privileges. This issue affects: All PAN-OS 7.1 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 7.1.*, 8.0.*, 9.0 – < 9.0.7, 8.1 – < 8.1.14 9.0.7

References