6.8
CVE-2025-0121
- EPSS 0.02%
- Published 11.04.2025 02:15:18
- Last modified 11.04.2025 15:39:52
- Source psirt@paloaltonetworks.com
- Teams watchlist Login
- Open Login
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorPalo Alto Networks
≫
Product
Cortex XDR Agent
Default Statusunaffected
Version <
6.3.3
Version
8.7.0
Status
unaffected
Version <
8.6.1
Version
8.6.0
Status
affected
Version <
8.5.2
Version
8.5.0
Status
affected
Version <
8.3.101-CE HF
Version
8.3-CE
Status
affected
Version <
7.9.103-CE HF
Version
7.9-CE
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.038 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| psirt@paloaltonetworks.com | 6.8 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.