Palo Alto Networks Patches Authentication Bypass Exploit in PAN
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-9474 | Root Privilege Escalation via Command Injection in Palo Alto Networks PAN-OS | 6.9 | 94% | KEVRansomwarePoC ×2 | KEV |
| CVE-2025-0108 | Authentication Bypass in Palo Alto Networks PAN-OS Management Interface | 8.8 | 98% | KEVPoC ×3 | KEV |
| CVE-2025-0109 | An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network… | 6.9 | <1% | ||
| CVE-2025-0110 | A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI… | 8.6 | 1% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Feb 13, 2025 Network Security / Vulnerability Palo Alto Networks has addressed a high-severity security flaw in its PAN-OS software that could result in an authentication bypass. The vulnerability, tracked as CVE-2025-0108 , carries a CVSS score of 7. 8 out of 10.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.