Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if GlobalProtect portal feature is not enabled. This issue impacts PAN-OS 9.1 versions earlier than PAN-OS 9.1.3; PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; PAN-OS 9.0 versions earlier than PAN-OS 9.0.9; all versions of PAN-OS 8.0 and PAN-OS 7.1. Prisma Access services are not impacted by this vulnerability.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Cytellite recent detection targeting CVE-2020-2034 — UAB Host Baltic Visit -- https://cti.loginsoft.com/ip/141.98.11.83 #Loginsoft #Cytellite #Cybersecurity #CVE20202034 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/iWvtuT4YEN
Post summary
The tweet references a recent detection of activity related to CVE-2020-2034 but provides no further technical or mitigation details.
Cytellite recent detection targeting CVE-2020-2034 — UAB Host Baltic Visit -- https://cti.loginsoft.com/ip/141.98.11.83 #Loginsoft #Cytellite #Cybersecurity #CVE20202034 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/5h3M2jd2hN
Post summary
Cytellite reports recent detection of activity targeting CVE-2020-2034, indicating potential active exploitation, but no further details or mitigation steps are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | paloaltonetworks | pan-os | - | - | - |