CVE-2020-2034

HIGH EXPLOITED

PAN-OS 7.1.0-7.1.25 - Unauthenticated OS Command Injection via GlobalProtect Portal

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2020-2034 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including blackhatethicalhacking.

AI-analyzed exploit summary This repository contains a Python script that scans Palo Alto Networks firewalls to determine their version by analyzing HTTP response headers (ETag and Last-Modified) from specific endpoints. It correlates the extracted timestamps with a version table to identify potentially vulnerable versions.

Description

An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if GlobalProtect portal feature is not enabled. This issue impacts PAN-OS 9.1 versions earlier than PAN-OS 9.1.3; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; all versions of PAN-OS 8.0 and PAN-OS 7.1. Prisma Access services are not impacted by this vulnerability.

Exploits (1)

nomisec SCANNER 13 stars
by blackhatethicalhacking · poc
https://github.com/blackhatethicalhacking/CVE-2020-2034-POC

This repository contains a Python script that scans Palo Alto Networks firewalls to determine their version by analyzing HTTP response headers (ETag and Last-Modified) from specific endpoints. It correlates the extracted timestamps with a version table to identify potentially vulnerable versions.

Classification
Scanner 95%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Palo Alto Networks PAN-OS (GlobalProtect Portal)
No auth needed
Prerequisites: Network access to the target firewall · version-table.txt file in the same directory
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://security.paloaltonetworks.com/CVE-2020-2034

Scores

CVSS v3 8.1
EPSS 0.0601
EPSS Percentile 92.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-07-31
CWE
CWE-78
Status published
Products (1)
paloaltonetworks/pan-os 7.1.0 - 7.1.26
Published Jul 08, 2020
Tracked Since Feb 18, 2026