CVE-2025-0108

Warnung

Medienbericht

Exploit

EPSS 98.46%
Veröffentlicht 12.02.2025 21:15:16
Zuletzt bearbeitet 24.09.2026 13:10:00
Erkennungen
Login

PAN-OS: Authentication Bypass in the Management Web Interface

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS.

You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue does not affect Cloud NGFW or Prisma Access software.

Betroffene Produkte Warnungen 1 Metriken 3 CWE 1 Referenzen 11

NVD 151 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Paloaltonetworks ≫ Pan-os Version >= 10.1.0 < 10.1.14

Paloaltonetworks ≫ Pan-os Version >= 10.2.0 < 10.2.7

Paloaltonetworks ≫ Pan-os Version >= 11.1.0 < 11.1.2

Paloaltonetworks ≫ Pan-os Version >= 11.2.0 < 11.2.4

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update -

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h1

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h2

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h3

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h4

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h5

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h6

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h7

Paloaltonetworks ≫ Pan-os Version 10.1.14 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h20

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h21

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h22

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h23

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.7 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h20

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.8 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h14

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h15

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h16

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h17

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h18

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h19

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h20

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.9 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h12

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h13

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.10 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h10

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h11

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h6

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h7

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h8

Paloaltonetworks ≫ Pan-os Version 10.2.11 Update h9

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update h2

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update h3

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update h4

Paloaltonetworks ≫ Pan-os Version 10.2.12 Update h5

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update -

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h1

Paloaltonetworks ≫ Pan-os Version 10.2.13 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h11

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h13

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h14

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h15

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h16

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h17

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h8

Paloaltonetworks ≫ Pan-os Version 11.1.2 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.3

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h10

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h11

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h12

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h3

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h4

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h5

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h6

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h7

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h8

Paloaltonetworks ≫ Pan-os Version 11.1.4 Update h9

Paloaltonetworks ≫ Pan-os Version 11.1.5

Paloaltonetworks ≫ Pan-os Version 11.1.6 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update -

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h1

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h2

Paloaltonetworks ≫ Pan-os Version 11.2.4 Update h3

18.02.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Schwachstelle

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in its management web interface. This vulnerability allows an unauthenticated attacker with network access to the management web interface to bypass the authentication normally required and invoke certain PHP scripts.

Beschreibung

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	98.46%	0.999

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
psirt@paloaltonetworks.com	8.8	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red

CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://slcyber.io/blog/nginx-apache-path-confusion-to-auth-bypass-in-pan-os/

Exploit

Press/Media Coverage

https://www.bleepingcomputer.com/news/security/palo-alto-networks-tags-new-firewall-bug-as-exploited-in-attacks/

Third Party Advisory

Press/Media Coverage

https://www.darkreading.com/remote-workforce/patch-now-cisa-researchers-warn-palo-alto-flaw-exploited-wild

Third Party Advisory

Press/Media Coverage

https://www.securityweek.com/palo-alto-networks-confirms-exploitation-of-firewall-vulnerability/

Third Party Advisory

Press/Media Coverage

https://www.theregister.com/2025/02/19/palo_alto_firewall_attack/

Third Party Advisory

Press/Media Coverage

https://security.paloaltonetworks.com/CVE-2025-0108

Vendor Advisory

Exploit

https://github.com/iSee857/CVE-2025-0108-PoC

Third Party Advisory

Exploit

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0108

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2025-0108

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-0108

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-0108

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-0108

18.02.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog