Skip to content
7.2 High

CVE-2020-2030 An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to…

Description

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue does not impact PAN-OS 9.0, PAN-OS 9.1, or Prisma Access services.

Affected products and versions

Product Affected versions Fixed in
PAN-OS 9.1 earliest → < 9.1.0 9.1.0
PAN-OS 9.0 earliest → < 9.0.0 9.0.0
PAN-OS 8.1 8.1 → < 8.1.15 8.1.15

References

Timeline

  1. Published
  2. Last modified
The 197 CVEs of PAN-OS →
Track this CVE