Vulners
Lucene search
CVE-2020-2038
🗓️ 09 Sep 2020 16:45:26Reported by palo_altoType 
cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 81 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 20 |
|---|---|---|---|---|
 | PAN-OS 10.0 - Remote Code Execution (Authenticated) Exploit | 9 Aug 202200:00 | – | zdt |
 | CVE-2020-2038 | 9 Sep 202000:00 | – | attackerkb |
 | CVE-2020-2038 | 12 Feb 202112:57 | – | circl |
 | Palo Alto Networks PAN-OS Management Interface Command Injection Vulnerability | 14 Sep 202000:00 | – | cnvd |
 | Palo Alto Networks PAN-OS Command Injection (CVE-2020-2038) | 21 Aug 202200:00 | – | checkpoint_advisories |
 | CVE-2020-2038 PAN-OS: OS command injection vulnerability in the management web interface | 9 Sep 202016:45 | – | cvelist |
 | PAN-OS 10.0 - Remote Code Execution (RCE) (Authenticated) | 9 Aug 202200:00 | – | exploitdb |
 | Exploit for OS Command Injection in Paloaltonetworks Pan-Os | 3 Aug 202217:21 | – | githubexploit |
 | Palo Alto Networks Authenticated Remote Code Execution | 15 Sep 202219:50 | – | metasploit |
 | Vulnerabilities fixed in PAN-OS | 10 Sep 202000:00 | – | ncsc |
10
Node
OROR
[
{
"product": "PAN-OS",
"vendor": "Palo Alto Networks",
"versions": [
{
"status": "unaffected",
"version": "8.1.*"
},
{
"changes": [
{
"at": "10.0.1",
"status": "unaffected"
}
],
"lessThan": "10.0.1",
"status": "affected",
"version": "10.0",
"versionType": "custom"
},
{
"changes": [
{
"at": "9.0.10",
"status": "unaffected"
}
],
"lessThan": "9.0.10",
"status": "affected",
"version": "9.0",
"versionType": "custom"
},
{
"changes": [
{
"at": "9.1.4",
"status": "unaffected"
}
],
"lessThan": "9.1.4",
"status": "affected",
"version": "9.1",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| cmd | query param | api/ | OS Command Injection via PAN-OS API op endpoint with crafted payload | CWE-78 |
| type | query param | api/ | OS Command Injection via PAN-OS API op endpoint with crafted payload | CWE-78 |
| key | query param | api/ | OS Command Injection via PAN-OS API op endpoint with crafted payload | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 03:11Current
7.3High risk
Vulners AI Score7.3
CVSS 3.17.2
CVSS 29
EPSS0.86086