CVE-2020-2001: PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenticated user with network access to PAN-OS management interface to write attacker supplied file on the system and elevate privileges. This issue affects: All PAN-OS 7.1 Panorama and 8.0 Panorama versions; PAN-OS 8.1 versions earlier than 8.1.12 on Panorama; PAN-OS 9.0 versions earlier than 9.0.6 on Panorama.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2001?
CVE-2020-2001 has a critical severity rating due to the potential for remote file writing and elevated privileges.
How do I fix CVE-2020-2001?
To fix CVE-2020-2001, upgrade your Palo Alto Networks PAN-OS to a version that is not vulnerable, specifically versions beyond 7.1.26, 8.0.20, or 8.1.12 for 8.1.x users.
Which versions of PAN-OS are affected by CVE-2020-2001?
CVE-2020-2001 affects PAN-OS versions 7.1.0 to 7.1.26, 8.0.0 to 8.0.20, 8.1.0 to 8.1.12, and 9.0.0 to 9.0.6.
Who can exploit CVE-2020-2001?
CVE-2020-2001 can be exploited by an unauthenticated user with network access to the PAN-OS management interface.
What are the potential impacts of CVE-2020-2001?
The potential impacts of CVE-2020-2001 include unauthorized file writing and privilege escalation, which could compromise the system's integrity.