CVE-2020-2009: PAN-OS: Panorama SD WAN arbitrary file creation
First published: Wed May 13 2020(Updated: )
An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in arbitrary code execution with root permissions. This issue affects: All versions of PAN-OS 7.1; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.
Credit: psirt@paloaltonetworks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palo Alto Networks PAN-OS | >=7.1.0<=7.1.26 | |
| Palo Alto Networks PAN-OS | >=8.0.0<=8.0.20 | |
| Palo Alto Networks PAN-OS | >=8.1.0<=8.1.13 | |
| Palo Alto Networks PAN-OS | >=9.0.0<=9.0.6 |
Remedy
This issue is fixed in PAN-OS 8.1.14, PAN-OS 9.0.7, and all later PAN-OS versions. PAN-OS 8.0 is now end-of-life as of October 31, 2019, and is no longer covered by our Product Security Assurance policies. PAN-OS 7.1 is on extended support until June 30, 2020, and is only being considered for critical security vulnerability fixes.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-2009?
CVE-2020-2009 is rated as a critical vulnerability due to its potential for an authenticated attacker to create arbitrary files.
How do I fix CVE-2020-2009?
To fix CVE-2020-2009, upgrade your Palo Alto Networks PAN-OS to a version that is not affected by this vulnerability.
Which versions are affected by CVE-2020-2009?
CVE-2020-2009 affects Palo Alto Networks PAN-OS versions 7.1.0 to 7.1.26, 8.0.0 to 8.0.20, 8.1.0 to 8.1.13, and 9.0.0 to 9.0.6.
Who is impacted by CVE-2020-2009?
Authenticated administrators using vulnerable versions of Palo Alto Networks PAN-OS Panorama are impacted by CVE-2020-2009.
What is an external control of filename vulnerability in CVE-2020-2009?
The external control of filename vulnerability in CVE-2020-2009 allows an attacker to write arbitrary files on all firewalls managed by Panorama.
- agent/weakness
- agent/type
- agent/softwarecombine
- agent/author
- agent/remedy
- agent/references
- agent/severity
- agent/title
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/paloaltonetworks
- canonical/palo alto networks pan-os
- version/palo alto networks pan-os/7.1.0
- version/palo alto networks pan-os/7.1.26
- version/palo alto networks pan-os/8.0.0
- version/palo alto networks pan-os/8.0.20
- version/palo alto networks pan-os/8.1.0
- version/palo alto networks pan-os/8.1.13
- version/palo alto networks pan-os/9.0.0
- version/palo alto networks pan-os/9.0.6