Skip to content
CVE Tracker
Back

CVE-2020-2001

PAN-OS: Panorama External control of file vulnerability leads to privilege escalation

High8.1EPSS 1.4%
Published
Updated
Reserved
Assigned by
palo_alto

Description

An external control of path and data vulnerability in the Palo Alto Networks PAN-OS Panorama XSLT processing logic that allows an unauthenticated user with network access to PAN-OS management interface to write attacker supplied file on the system and elevate privileges. This issue affects: All PAN-OS 7.1 Panorama and 8.0 Panorama versions; PAN-OS 8.1 versions earlier than 8.1.12 on Panorama; PAN-OS 9.0 versions earlier than 9.0.6 on Panorama.

Scores

CVSS scores of CVE-2020-2001, by who scored it
Scored byCVSSScoreVector
palo_altoCNA (assigner)3.1High8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
1.4% · top 28% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Weakness

Affected products

  • Palo Alto Networks · PAN-OS

    • affected 8.0.*
    • affected 7.1.*
    • affected 8.1 – < 8.1.12
    • affected 9.0 – < 9.0.6

What to do

Solution: This issue is fixed in PAN-OS 8.1.12, PAN-OS 9.0.6, and all later PAN-OS versions. PAN-OS 7.1 is on extended support until June 30, 2020, and is only being considered for critical security vulnerability fixes. PAN-OS 8.0 is now end-of-life as of October 31, 2019, and is no longer covered by our Product Security Assurance policies.

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .