CVE-2020-2000

🗓️ 12 Nov 2020 00:05:20Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 109 Views

OS command injection and memory corruption vulnerability in PAN-OS management web interfac

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-2000	12 Nov 202002:30	–	circl
CNVD	Palo Alto Networks PAN-OS Command Injection Vulnerability (CNVD-2020-63190)	13 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-2000 PAN-OS: OS command injection and memory corruption vulnerability	12 Nov 202000:05	–	cvelist
EUVD	EUVD-2020-22028	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in PAN OS	12 Nov 202000:00	–	ncsc
NVD	CVE-2020-2000	12 Nov 202000:15	–	nvd
OSV	CVE-2020-2000	12 Nov 202000:15	–	osv
Palo Alto Networks	PAN-OS: OS command injection and memory corruption vulnerability	11 Nov 202017:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS 8.1.x < 8.1.16 / 9.0.x < 9.0.10 / 9.1.x < 9.1.4 / 10.0.x < 10.0.1 Command Injection Vulnerability	13 Nov 202000:00	–	nessus
Prion	Memory corruption	12 Nov 202000:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange8.1.0–8.1.16

paloaltonetworks pan-osRange9.0.0–9.0.10

paloaltonetworks pan-osRange9.1.0–9.1.4

paloaltonetworks pan-osRange10.0.0–10.0.1

[
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "8.1.16",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.1.16",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.0.10",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.10",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.1.4",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.1.4",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "10.0.1",
            "status": "unaffected"
          }
        ],
        "lessThan": "10.0.1",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2020-2000

21 Nov 2024 05:24Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.2

CVSS 29

EPSS0.01715

cve-2020-2000 pan-os command injection memory corruption vulnerability nvd system processes root privileges os commands