CVE-2020-2009

CVE-2020-2009 is an external control of filename vulnerability affecting the SD WAN component of Palo Alto Networks PAN-OS Panorama, specifically versions 7.1 (all), 8.1 (prior to 8.1.14), and 9.0 (prior to 9.0.7). An authenticated administrator can exploit this to create and write arbitrary files on managed firewalls, potentially leading to arbitrary code execution with root privileges. With a CVSS score of 7.2 (High), this vulnerability has a network attack vector and low attack complexity, allowing for high impact on confidentiality, integrity, and availability. The EPSS score is low at 0.01523, suggesting a low probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, aligning with the typical low attention for most vulnerabilities.