Palo Alto Networks PAN-OS 8.0.x < 8.1.15 / 8.1.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 Authentication Bypass in SAML Authentication (CVE-2020-2021)

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.1.15 or 8.1.x prior to 8.1.15 or 9.0.x prior to 9.0.9 or 9.1.x prior to 9.1.3. It is, therefore, affected by a SAML authentication bypass vulnerability. Note that Nessus has not tested for this issue but has...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2021-22179)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the management server in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability to execute arbitrary operati...

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2021-22180)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An operating system command injection vulnerability exists in the web management interface in Palo Alto Networks PAN-OS version 8.0 all versions, version 7.1 prior to 7.1.26, and version...

Palo Alto Networks PAN-OS Buffer Overflow Vulnerability (CNVD-2021-22178)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A buffer overflow vulnerability exists in the authd component of the management server in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability to interfere with system...

Palo Alto Networks PAN-OS Series PA-7000 9.0 < 9.0.7 / 9.1 < 9.1.2 RCE

The version of Palo Alto Networks PAN-OS running on the remote host is 9.0.x prior to 9.0.7 or 9.1.x prior to 9.1.2. It is, therefore, affected by a remote code execution vulnerability. Improper restriction of communications to Log Forwarding Card LFC on PA-7000 Series devices with the WildFire...

CVE-2020-2029

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

CVE-2020-2027

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

CVE-2020-2028

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2027

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

Command injection

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

Buffer overflow

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

Command injection

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2029

CVE-2020-2029 is an OS command injection vulnerability in PAN-OS web management interface. Authenticated administrators can execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for PAN-OS configuration. Affected are PAN-OS 8.0 (all version...

CVE-2020-2029 PAN-OS: OS command injection vulnerability in management interface certificate generator

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions ...

CVE-2020-2028

CVE-2020-2028 describes an OS command injection vulnerability in Palo Alto Networks PAN-OS management server that allows authenticated administrators to execute arbitrary commands with root privileges when uploading a new certificate in FIPS-CC mode. Affected products/versions are PAN-OS 7.1.x, a...

CVE-2020-2028 PAN-OS: OS command injection vulnerability in FIPS-CC mode certificate verification

An OS Command Injection vulnerability in PAN-OS management server allows authenticated administrators to execute arbitrary OS commands with root privileges when uploading a new certificate in FIPS-CC mode. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions earlier...

CVE-2020-2027 PAN-OS: Buffer overflow in authd authentication response

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue affects: All versions of PAN-OS 7.1 and PAN-OS 8.0; PAN-OS 8.1 versions...

CVE-2020-2027

PAN-OS contains a buffer overflow in the authd component of the management server that can be triggered by authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. Affected versions include PAN-OS 7.1 and 8.0 in general; PAN-OS 8.1 befo...

PAN-OS: Buffer overflow in authd authentication response

A buffer overflow vulnerability in the authd component of the PAN-OS management server allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. Work around: This issue affects the management interface of PAN-OS and you can mitiga...

PAN-OS: OS command injection vulnerability in management interface certificate generator

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. Work around: This issue affects t...