PT-2020-15231 · Palo Alto Networks · Pan-Os Panorama

Jin Chen + 1 · Published 2020-05-13 · Updated 2020-05-19 · CVE-2020-2009

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS Panorama versions 7.1 Palo Alto Networks PAN-OS Panorama versions 8.1 through 8.1.13 Palo Alto Networks PAN-OS Panorama versions 9.0 through 9.0.6

Description An external control of filename vulnerability in the SD WAN component allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases, this results in arbitrary code execution with root permissions.

Recommendations For versions 7.1, update to a version later than 7.1 to resolve the issue. For versions 8.1 through 8.1.13, update to version 8.1.14 or later to resolve the issue. For versions 9.0 through 9.0.6, update to version 9.0.7 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-73

CWE-610

Related Identifiers

CVE-2020-2009

Affected Products

Pan-Os Panorama

References · 5

• https://safe-surf.ru/specialists/bulletins-nkcki/650930 · Security Note
• https://security.paloaltonetworks.com/CVE-2020-2009 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-2009 · Security Note
• https://osv.dev/vulnerability/CVE-2020-2009 · Vendor Advisory
• https://t.me/cvenotify/3771 · Telegram Post