What is CVE-2020-2003?

CVE-2020-2003 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under External Control of File Name or Path. CVSS score: 6.5/10. Published 2020-05-13.

How severe is CVE-2020-2003?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Palo Alto Networks Pan-Os

CVE-2020-2003

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8.0; PAN-OS 8.1 versions before 8.1.14; PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.1.

EPSS: 0.009 (57.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H.

Affected products

Palo Alto Networks Pan-os — versions 7.1.*, 8.0.*, 8.1
Paloaltonetworks Pan-os

Weakness classification (CWE)

CWE-73 — External Control of File Name or Path

References

psirt@paloaltonetworks.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-2003?: CVE-2020-2003 is a medium-severity vulnerability in Palo Alto Networks Pan-Os, classified under External Control of File Name or Path. CVSS score: 6.5/10. Published 2020-05-13.
How severe is CVE-2020-2003?: Medium severity. CVSS v3 base score is 6.5 out of 10.