CVE-2020-2037

—

CVSS 3.1

7.2 high

EPSS

4%p89

Published

Sep 9, 2020 (Sep 9, 2020)

Modified

Jun 17, 2026

Description

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.3.

Vendors: paloaltonetworks
Products: pan-os
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news1 stories

Vulnerabilities discovered in PAN-OS, which powers Palo Alto Networks' firewalls

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2020Vulnerability CVE-2020-2037 CVE-2020-2036 CVE-2020-2038+1 CVEs