Skip to content
OpenAdvisories
High · 7.2 CVE-2020-2037 EUVD-2020-22063GHSA-fvgh-hcc6-c2q5

PAN-OS: OS command injection vulnerability in the management web interface

Published Sep 9, 2020 · Updated Sep 16, 2024 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: PAN-OS Category: Network devices

Description

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 8.1 – < 8.1.16, 9.0 – < 9.0.10, 9.1 – < 9.1.3 8.1.16

References