PaloAlto Networks PAN-OS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• Medium 5.9
  CVE-2025-0108 Exploited Public exploit Scanner template EPSS 98%

  PAN-OS: Authentication Bypass in the Management Web Interface

  An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certai…

  Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  Feb 12, 2025

  KEV Feb 18, 2025
• Medium 5.9
  CVE-2025-0111 Exploited

  PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

  An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can gre…

  Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  Feb 12, 2025

  KEV Feb 20, 2025
• High 7.5
  CVE-2025-0110

  PAN-OS OpenConfig Plugin: Command Injection Vulnerability in OpenConfig Plugin

  A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands.…

  Palo Alto Networks PAN-OS OpenConfig Plugin Network devices
  Feb 12, 2025
• Low 2.1
  CVE-2025-0109

  PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface

  An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limite…

  Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  Feb 12, 2025

Revision history

1. 2025-02-17 #2

   CVE-2025-0108 wird aktiv ausgenutzt

2. 2025-02-12 #1

   Initiale Fassung

References

• Palo Alto Networks Security Advisories vom 2025-02-12
  https://security.paloaltonetworks.com/CVE-2025-0108
• Palo Alto Networks Security Advisories vom 2025-02-12
  https://security.paloaltonetworks.com/CVE-2025-0109
• Palo Alto Networks Security Advisories vom 2025-02-12
  https://security.paloaltonetworks.com/CVE-2025-0110
• Palo Alto Networks Security Advisories vom 2025-02-12
  https://security.paloaltonetworks.com/CVE-2025-0111
• Github PoC für CVE-2025-0108 vom 2025-02-13
  https://github.com/iSee857/CVE-2025-0108-PoC/blob/main/PanOs_CVE-2025-0108_LoginByPass.py
• Greynoise vom 2025-02-17
  https://viz.greynoise.io/tags/palo-alto-pan-os-cve-2025-0108-auth-bypass-attempt