CVE-2025-0108

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Pan-Os

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS. You can greatly reduce the risk of this issue by restricting access…

12. Feb 2025

Ausgewertete Quellen

• Hersteller
  https://security.paloaltonetworks.com/CVE-2025-0108
• Hinweis
  https://www.bleepingcomputer.com/news/security/palo-alto-networks-tags-new-firewall-bug-as-exploited-in-attacks/
• Hinweis
  https://www.darkreading.com/remote-workforce/patch-now-cisa-researchers-warn-palo-alto-flaw-exploited-wild
• Hinweis
  https://www.securityweek.com/palo-alto-networks-confirms-exploitation-of-firewall-vulnerability/
• Hinweis
  https://www.theregister.com/2025/02/19/palo_alto_firewall_attack/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0108
• CISA
  Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
• NVD
  CVE-2025-0108
• GitHub
  https://github.com/iSee857/CVE-2025-0108-PoC