CVE-2020-2000— PAN-OS: OS command injection and memory corruption vulnerability
Quick assessment
Affected
Palo Alto Networks PAN-OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Palo Alto Networks PAN-OS是美国Palo Alto Networks公司的一套为其防火墙设备开发的操作系统。 Palo Alto Networks PAN-OS 存在安全漏洞，该漏洞源于系统管理web界面中的操作系统命令注入和内存破坏漏洞，允许经过身份验证的管理员中断系统进程，并可能使用root特权执行任意代码和操作系统命令。以下产品及版本受到影响：PAN-OS 8.1版本至8.1.16版本，PAN-OS 9.0版本至PAN-OS 9.0.17版本，PAN-OS 9.1版本至PAN
Possible ATT&CK Techniques 3 AI
T1068 · Exploitation for Privilege Escalation T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-2000
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PAN-OS: OS command injection and memory corruption vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
An OS command injection and memory corruption vulnerability in the PAN-OS management web interface that allows authenticated administrators to disrupt system processes and potentially execute arbitrary code and OS commands with root privileges. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.16; PAN-OS 9.0 versions earlier than PAN-OS 9.0.10; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Palo Alto Networks PAN-OS 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Palo Alto Networks PAN-OS是美国Palo Alto Networks公司的一套为其防火墙设备开发的操作系统。 Palo Alto Networks PAN-OS 存在安全漏洞，该漏洞源于系统管理web界面中的操作系统命令注入和内存破坏漏洞，允许经过身份验证的管理员中断系统进程，并可能使用root特权执行任意代码和操作系统命令。以下产品及版本受到影响：PAN-OS 8.1版本至8.1.16版本，PAN-OS 9.0版本至PAN-OS 9.0.17版本，PAN-OS 9.1版本至PAN
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Palo Alto Networks | PAN-OS | 8.1 ~ 8.1.16 | - |
|
II. Public POCs for CVE-2020-2000
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-2000
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-2000 (1)
-
https://security.paloaltonetworks.com/CVE-2020-2000 x_refsource_MISC
Same Patch Batch · Palo Alto Networks · 2020-11-12 · 5 CVEs total
| CVE-2020-2050 | 8.2 HIGH | PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate ve |
| CVE-2020-2022 | 7.5 HIGH | PAN-OS: Panorama session disclosure during context switch into managed device |
| CVE-2020-1999 | 5.3 MEDIUM | PAN-OS: Threat signatures are evaded by specifically crafted packets |
| CVE-2020-2048 | 3.3 LOW | PAN-OS: System proxy passwords may be logged in clear text while viewing system state |
IV. Related Vulnerabilities
Same product: PAN-OS
-
CVE-2025-0116
PAN-OS: Firewall Denial of Service (DoS) Using a Specially C -
CVE-2025-0115
PAN-OS: Authenticated Admin File Read Vulnerability in PAN-O -
CVE-2025-0114
PAN-OS: Denial of Service (DoS) in GlobalProtect -
CVE-2024-9471
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API -
CVE-2024-8691
PAN-OS: User Impersonation in GlobalProtect Portal
Same vendor: Palo Alto Networks
-
CVE-2026-0302
Checkov by Prisma Cloud: OS Command Injection Vulnerability -
CVE-2026-0303
Checkov by Prisma Cloud: Code Execution via Auto-Loaded Conf -
CVE-2026-0304
Cortex XDR Broker VM: Privilege Escalation Vulnerability -
CVE-2026-0305
Prisma Access Agent: Information Disclosure Vulnerability on -
CVE-2026-0306
Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Wi
Same weakness: CWE-20
-
CVE-2026-107825
OWASP Coraza WAF: ProcessURI silently drops QUERY_STRING and -
CVE-2026-48484
pyLoad: Lack of Input Size Validation Leads to Denial of Ser -
CVE-2026-103413
Apache Camel Karavan: unvalidated Kubernetes resources appli -
CVE-2026-107734
SumatraPDF: SyncTeX Argument Injection in Inverse Search Ena -
CVE-2026-107726
Hazelcast: Arbitrary member memory access by low-privileged
V. Comments for CVE-2020-2000
No comments yet