NetSight
IP …
high7.2Public exploit code

CVE-2020-2038

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root pr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 9.0.0 before 9.0.10
from 9.1.0 before 9.1.4
from 10.0.0 before 10.0.1

Weakness classification

CWE-78

References