PT-2020-3030 · Palo Alto Networks · Pan-Os

Published 2020-03-11 · Updated 2020-03-13 · CVE-2020-1980

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 8.1.13

Description A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. The issue is related to the lack of input validation measures in the CLI component.

Recommendations For versions prior to 8.1.13, update to PAN-OS 8.1.13 or a later version to resolve the issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2020-03285

CVE-2020-1980

Affected Products

Pan-Os

References · 4

• https://osv.dev/vulnerability/CVE-2020-1980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1980 · Security Note
• https://security.paloaltonetworks.com/CVE-2020-1980 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03285 · Security Note