CVE-2020-2034

🗓️ 08 Jul 2020 16:35:17Reported by palo_altoType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 197 Views

OS Command Injection vulnerability in PAN-OS GlobalProtect portal allows unauthenticated network based attacker to execute arbitrary OS commands with root privileges. Requires firewall knowledge; not exploitable if GlobalProtect portal feature is not enabled. Affects PAN-OS 9.1 versions earlier than 9.1.3; PAN-OS 8.1 versions earlier than 8.1.15; PAN-OS 9.0 versions earlier than 9.0.9; all versions of PAN-OS 8.0 and 7.1. Prisma Access services not impacted

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Pan-Os	8 Aug 202014:19	–	githubexploit
ATTACKERKB	CVE-2020-2034 — PAN-OS: OS command injection vulnerability in GlobalProtect portal	8 Jul 202000:00	–	attackerkb
Circl	CVE-2020-2034	30 Jun 202014:21	–	circl
CNVD	Palo Alto Networks PAN-OS OS Command Injection Vulnerability	9 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-2034 PAN-OS: OS command injection vulnerability in GlobalProtect portal	8 Jul 202016:35	–	cvelist
NVD	CVE-2020-2034	8 Jul 202017:15	–	nvd
OSV	CVE-2020-2034	8 Jul 202017:15	–	osv
Palo Alto Networks	PAN-OS: OS command injection vulnerability in GlobalProtect portal	8 Jul 202016:00	–	paloalto
Tenable Nessus	Palo Alto Networks PAN-OS 7.1.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 GlobalProtect Command Injection Vulnerability	9 Jul 202000:00	–	nessus
Prion	Command injection	8 Jul 202017:15	–	prion

NVD

Vulners

Node

paloaltonetworks pan-osRange7.1.0–7.1.26

paloaltonetworks pan-osRange8.0.0–8.0.20

paloaltonetworks pan-osRange8.1.0–8.1.15

paloaltonetworks pan-osRange9.0.0–9.0.9

paloaltonetworks pan-osRange9.1.0–9.1.3

[
  {
    "product": "PAN-OS",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.*"
      },
      {
        "status": "affected",
        "version": "7.1.*"
      },
      {
        "changes": [
          {
            "at": "9.1.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.1.3",
        "status": "affected",
        "version": "9.1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "9.0.9",
            "status": "unaffected"
          }
        ],
        "lessThan": "9.0.9",
        "status": "affected",
        "version": "9.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "8.1.15",
            "status": "unaffected"
          }
        ],
        "lessThan": "8.1.15",
        "status": "affected",
        "version": "8.1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security	www.security.paloaltonetworks.com/CVE-2020-2034

21 Nov 2024 05:24Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.1

CVSS 29.3

EPSS0.77767