Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os

CVE-2020-2021

githubexploit · 2020-06-29

Description

Exploit for Improper Verification of Cryptographic Signature in Paloaltonetworks Pan-Os. Change target IP in the poc.sh and then run the exploit

Affected Paloaltonetworks Pan-os versions

Paloaltonetworks Pan-os≤ 8.0.20, 8.1.15, 9.0.9, 9.1.3

All known vulnerabilities by product

Globalprotect Clientless Vpn Globalprotect Gateway Globalprotect Portal Pan-Os Panorama Prisma Access

CVSS 10.0 for CVE-2020-2021

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

4.4%higher than 90.0% of all CVEs

Updated 2026-06-24

Exploit Details

Modified:2025-07-22 14:08

Last Seen:2025-08-31 20:44

Reporter:mr-r3b00t

Written in:Shell

Last commit:2020-10-12

Exploit Code

README10 lines

## https://sploitus.com/exploit?id=6D825BB4-8B86-5C07-8265-B2BF353F672A
# CVE-2020-2021
CVE-2020-2021

change target IP in the poc.sh

run the following

chmod +x poc.sh
./poc.sh

Exploit Code

Share

Share on social media: