{"id":"CVE-2020-1980","published":"2020-03-11T18:58:17Z","modified":"2024-09-16T16:29:01Z","title":"PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands","vendor":"Palo Alto Networks","product":"PAN-OS","tier":"tail","description":{"text":"A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions. This issue is fixed in PAN-OS 8.1.13, and all later versions.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00627,"percentile":0.499,"provenance":"source"},"cwes":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2020-1980","tags":["x_refsource_CONFIRM"]}],"priority":{"score":15.4,"factors":[{"name":"EPSS percentile","points":9.98},{"name":"CVSS severity","points":5.46}]},"vendorSlug":"palo-alto-networks","affectedVersions":[{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":["8.1 < 8.1.13","8.1 !>= 8.1.13","9.0 !>= 9.0.0","7.1 !>= 7.1.0","9.1 !>= 9.1.0"]}],"euvd":{"id":"EUVD-2020-12770","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-palo-alto-networks-pan-os-cwe-77"}}