CVE-2020-2038

PoC ×2—

CVSS 3.1

7.2 high

EPSS

86%p100

Published

Sep 9, 2020 (Sep 9, 2020)

Modified

Jun 17, 2026

Description

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.

Vendors: paloaltonetworks
Products: pan-os
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (86.1%)

In the news1 stories

Vulnerabilities discovered in PAN-OS, which powers Palo Alto Networks' firewalls

Help Net SecuritySep 10, 00:00 UTC · Sep 10, 2020Vulnerability CVE-2020-2037 CVE-2020-2036 CVE-2020-2038+1 CVEs