Skip to content
OpenAdvisories
Medium WID-SEC-2025-0547 3 CVEs

PaloAlto Networks PAN-OS: Mehrere Schwachstellen

Published Mar 12, 2025 · Updated Mar 12, 2025 · de-DE

Vendor: Palo Alto Networks Product: PAN-OS

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS ausnutzen, um Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.

Vulnerabilities 3

  • High 8.2
    CVE-2025-0114

    PAN-OS: Denial of Service (DoS) in GlobalProtect

    A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.8
    CVE-2025-0116

    PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame

    A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.6
    CVE-2025-0115

    PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI

    A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate …

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References