CVE-2020-2038

HIGH

Palo Alto Networks Authenticated Remote Code Execution

Title source: metasploit

Description

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts: PAN-OS 9.0 versions earlier than 9.0.10; PAN-OS 9.1 versions earlier than 9.1.4; PAN-OS 10.0 versions earlier than 10.0.1.

Exploits (3)

exploitdb WORKING POC

by UnD3sc0n0c1d0 · pythonremotemultiple

https://www.exploit-db.com/exploits/51005

View Code ZIP pw:eip

nomisec WORKING POC 5 stars

by und3sc0n0c1d0 · poc

https://github.com/und3sc0n0c1d0/CVE-2020-2038

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Mikhail Klyuchnikov, Nikita Abramov, UnD3sc0n0c1d0, jheysel-r7 · rubypoclinux

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/panos_op_cmd_exec.rb

View Code ZIP pw:eip

References (3)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/168008/PAN-OS-10.0-Remote-Code-Execution.html

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/168408/Palo-Alto-Networks-Authenticated-Remote-Code-Execution.html

[Vendor Advisory] https://security.paloaltonetworks.com/CVE-2020-2038

Scores

CVSS v3 7.2

EPSS 0.8802

EPSS Percentile 99.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-78

Status published

Products (1)

paloaltonetworks/pan-os 9.0.0 - 9.0.10

Published Sep 09, 2020

Tracked Since Feb 18, 2026