{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T03:30:29.562","vulnerabilities":[{"cve":{"id":"CVE-2020-2034","sourceIdentifier":"psirt@paloaltonetworks.com","published":"2020-07-08T17:15:10.047","lastModified":"2026-06-17T03:11:41.073","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if GlobalProtect portal feature is not enabled. This issue impacts PAN-OS 9.1 versions earlier than PAN-OS 9.1.3; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; all versions of PAN-OS 8.0 and PAN-OS 7.1. Prisma Access services are not impacted by this vulnerability."},{"lang":"es","value":"Una vulnerabilidad de Inyección de Comandos del Sistema Operativo en el portal GlobalProtect de PAN-OS, permite a un atacante basado en una red no autenticado ejecutar comandos arbitrarios de Sistema Operativo con privilegios root. Un atacante requiere poseer algún conocimiento del firewall para explotar este problema. Este problema no puede ser explotado si la funcionalidad del portal GlobalProtect no está habilitada. Este problema afecta a versiones PAN-OS 9.1 anteriores a PAN-OS 9.1.3; versiones PAN-OS 8.1 anteriores a PAN-OS 8.1.15; versiones PAN-OS 9.0 anteriores a PAN-OS 9.0.9; todas las versiones de PAN-OS 8.0 y PAN-OS 7.1. Los servicios Prisma Access no están afectados por esta vulnerabilidad"}],"affected":[{"source":"psirt@paloaltonetworks.com","affectedData":[{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":[{"version":"8.0.*","status":"affected"},{"version":"7.1.*","status":"affected"},{"version":"9.1","lessThan":"9.1.3","versionType":"custom","status":"affected","changes":[{"at":"9.1.3","status":"unaffected"}]},{"version":"9.0","lessThan":"9.0.9","versionType":"custom","status":"affected","changes":[{"at":"9.0.9","status":"unaffected"}]},{"version":"8.1","lessThan":"8.1.15","versionType":"custom","status":"affected","changes":[{"at":"8.1.15","status":"unaffected"}]}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"7.1.0","versionEndIncluding":"7.1.26","matchCriteriaId":"9223062F-C3E8-4D86-88E4-70D775D1151F"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"8.0.0","versionEndIncluding":"8.0.20","matchCriteriaId":"2BEFBF38-AF84-4477-A6B9-5BDD51D54F4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"8.1.0","versionEndExcluding":"8.1.15","matchCriteriaId":"6116C706-6AC7-476D-9624-C0D4BE3D497A"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.9","matchCriteriaId":"6D6E8B99-4150-4AE8-A580-08AC71F64760"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.3","matchCriteriaId":"4E9F14E9-3CD7-443B-9D97-254E917FA22B"}]}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2020-2034","source":"psirt@paloaltonetworks.com","tags":["Vendor Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2020-2034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}