CVE-2020-2038: PAN-OS: OS command injection vulnerability in the management web interface

Q: What is CVE-2020-2038?

CVE-2020-2038 is an OS Command Injection vulnerability in the PAN-OS management interface.

Q: Which software versions are affected by CVE-2020-2038?

CVE-2020-2038 affects PAN-OS 9.0 versions earlier than 9.0.10, PAN-OS 9.1 versions earlier than 9.1.4, and PAN-OS 10.0 versions earlier than 10.0.1.

Q: What is the severity of CVE-2020-2038?

CVE-2020-2038 has a severity of 7.2 (critical).

Q: How can an attacker exploit CVE-2020-2038?

An attacker can exploit CVE-2020-2038 by using the PAN-OS management interface to execute arbitrary OS commands with root privileges.

Q: How do I fix CVE-2020-2038?

To fix CVE-2020-2038, update to PAN-OS 9.0.10 or later, PAN-OS 9.1.4 or later, or PAN-OS 10.0.1 or later.

Published Sep 9, 2020

Updated

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.

Affected Software

3 affected components

Palo Alto Networks PAN-OS>=9.0.0<9.0.10

Palo Alto Networks PAN-OS>=9.1.0<9.1.4

Palo Alto Networks PAN-OS>=10.0.0<10.0.1

Remediation

Information

This issue is fixed in PAN-OS 9.0.10, PAN-OS 9.1.4, PAN-OS 10.0.1, and all later PAN-OS versions.

Event History

Sep 9, 2020

CVE Published

via MITRE·04:45 PM

Data Sourced

via MITRE·04:45 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-2038?

CVE-2020-2038 is an OS Command Injection vulnerability in the PAN-OS management interface.

Which software versions are affected by CVE-2020-2038?