CVE-2020-1981CWE-377

PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation

High · published March 11, 2020

CVSS v3.1
7.0
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execute commands as a low privileged user and gain root access on the PAN-OS hardware or virtual appliance. This issue affects only PAN-OS 8.1 versions earlier than PAN-OS 8.1.13. This issue does not affect PAN-OS 7.1, PAN-OS 9.0, or later PAN-OS versions.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00362 · 28.6th percentile
Weakness
CWE-377 · Insecure Temporary File
Published
2020-03-11T18:58Z
EPSS history
Timeline
  • 11 MAR 18:58Z
    PAN-OS: Predictable temporary filename vulnerability allows local privilege escalation
    cvelistv5