CVE-2020-1981
High
Description
A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.
SeverityHigh
CVSS7.0
Exploit probability—
Product
Paloaltonetworks Pan-os
PublishedMar 11, 2020
First seenMar 11, 2020
Weakness typeCWE-377CWE-377
How to fix
Update
- paloaltonetworks pan-os8.1.13 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks pan-os | 8.1.0 ≤ v < 8.1.13 | 8.1.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.