{"document":{"category":"csaf_vex","csaf_version":"2.1","notes":[{"category":"summary","text":"Palo Alto Networks PSIRT provided VEX document. This document is autogenerated.","title":"PAN-OS: Panorama SD WAN arbitrary file creation"}],"publisher":{"category":"vendor","name":"Palo Alto Networks","namespace":"https://security.paloaltonetworks.com"},"title":"Palo Alto Networks PSIRT provided VEX document: CVE-2020-2009","distribution":{"text":"Copyright © 2024 Palo Alto Networks. All rights reserved.","tlp":{"label":"CLEAR","url":"https://www.first.org/tlp/"}},"tracking":{"current_release_date":"2026-04-11T00:53:11.542Z","generator":{"date":"2026-04-11T00:53:11.542Z","engine":{"name":"Vulnogram","version":"0.0.9"}},"id":"CVE-2020-2009","initial_release_date":"2020-05-13T16:00:00.000Z","revision_history":[{"number":"1","date":"2020-05-13T09:00:00.000Z","summary":"Initial publication"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"name":"Palo Alto Networks","category":"vendor","branches":[]}]},"vulnerabilities":[{"cve":"CVE-2020-2009","product_status":{"fixed":["PANW-PAN-OS-330","PANW-PAN-OS-332"],"known_affected":["PANW-PAN-OS-318","PANW-PAN-OS-313","PANW-PAN-OS-330","PANW-PAN-OS-332"]},"notes":[{"category":"description","text":"An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in arbitrary code execution with root permissions."}],"references":[{"category":"external","summary":"NVD - CVE-2020-2009","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2009"},{"category":"self","summary":"Palo Alto Networks Security Advisory CVE-2020-2009","url":"https://security.paloaltonetworks.com/CVE-2020-2009"}],"threats":[{"category":"impact","description":"An external control of filename vulnerability in the SD WAN component of Palo Alto Networks PAN-OS Panorama allows an authenticated administrator to send a request that results in the creation and write of an arbitrary file on all firewalls managed by the Panorama. In some cases this results in arbitrary code execution with root permissions."}],"scores":[{"cvss_v3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH"},"products":["PANW-PAN-OS-318","PANW-PAN-OS-313","PANW-PAN-OS-330","PANW-PAN-OS-332"]}]}]}