CVE-2020-1980

—

CVSS 3.1

7.8 high

EPSS

<1%p48

Published

Mar 11, 2020 (Mar 11, 2020)

Modified

Jun 17, 2026

Description

A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions.

Vendors: paloaltonetworks
Products: pan-os
Weakness: CWE-77, CWE-78
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.