PT-2020-3956

Name of the Vulnerable Software and Affected Versions: PAN-OS versions earlier than 8.1.16 PAN-OS versions earlier than 9.0.9 Description: A reflected cross-site scripting XSS issue exists in the PAN-OS management web interface. This could allow a remote attacker to execute arbitrary JavaScript...

CVE-2020-2042: Stack-based Buffer Overflow

A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. This issue impacts only PAN-OS 10.0 versions earlier than PAN-OS 10.0.1...

PT-2020-5492 · Openssl +4 · Openssl +4

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2 through 1.0.2v PAN-OS software versions earlier than 10.0 Description: The issue is related to a flaw in the TLS specification that can lead to an attacker being able to compute the pre-master secret in connections whic...

PT-2020-15262 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS versions prior to 9.0.10 PAN-OS versions prior to 9.1.4 PAN-OS versions prior to 10.0.1 Description: The issue is an OS Command Injection vulnerability in the management interface, allowing authenticated administrators to execute...

CVE-2020-2036: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in the PAN-OS management web interface. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could...

Palo Alto Networks Authenticated Remote Code Execution

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS versions use exploit/linux/http/panos/opcmdexec msf undefinedopcmdexec show actions ...actions... msf...

CVE-2020-2041: Undefined Security Weakness

An insecure configuration of the appweb daemon of Palo Alto Networks PAN-OS 8.1 allows a remote unauthenticated user to send a specifically crafted request to the device that causes the appweb service to crash. Repeated attempts to send this request result in denial of service to all PAN-OS...

CVE-2020-2038

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlie...

CVE-2020-2038: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlie...

CVE-2020-2039: Uncontrolled Resource Consumption

An uncontrolled resource consumption vulnerability in Palo Alto Networks PAN-OS allows for a remote unauthenticated user to upload temporary files through the management web interface that are not properly deleted after the request is finished. It is possible for an attacker to disrupt the...

CVE-2020-2040

A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to the Captive Portal or Multi-Factor Authentication interface. This issue impacts: All versions of...

PT-2020-15269

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 8.1.16 Palo Alto Networks PAN-OS versions 9.0 prior to 9.0.10 Palo Alto Networks PAN-OS versions 9.1 prior to 9.1.3 Description An information exposure through log file vulnerability may occur where ...

PT-2020-15267

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 10.0.1 Description A buffer overflow vulnerability in the PAN-OS management web interface allows authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges...

PT-2020-15261

Name of the Vulnerable Software and Affected Versions PAN-OS versions earlier than 8.1.16 PAN-OS versions earlier than 9.0.10 PAN-OS versions earlier than 9.1.3 Description The issue is an OS Command Injection vulnerability in the PAN-OS management interface. It allows authenticated administrator...

PT-2020-15265

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 8.0 through 8.1.15 Description The issue is caused by an insecure configuration of the appweb daemon, allowing a remote unauthenticated user to send a specifically crafted request to the device, causing the...

CVE-2020-2037

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1...

CVE-2020-2037: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1...

CVE-2020-2044: Insertion of Sensitive Information into Log File

An information exposure through log file vulnerability where an administrator's password or other sensitive information may be logged in cleartext while using the CLI in Palo Alto Networks PAN-OS software. The opcmdhistory.log file was introduced to track operational command op-command usage but...

CVE-2020-2043: Insertion of Sensitive Information into Log File

An information exposure through log file vulnerability where sensitive fields are recorded in the configuration log without masking on Palo Alto Networks PAN-OS software when the after-change-detail custom syslog field is enabled for configuration logs and the sensitive field appears multiple tim...

CVE-2020-2040: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability in PAN-OS allows an unauthenticated attacker to disrupt system processes and potentially execute arbitrary code with root privileges by sending a malicious request to the Captive Portal or Multi-Factor Authentication interface. This issue impacts: All versions of...