VulnerabilityhighExploited in the wild

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

The Hacker Newsby @TheHackersNewsFeb 21, 2025 · 04:45 UTC (Feb 21, 2025)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-0108 CVE-2024-53704 CVE-2024-9474 CVE-2025-0111

Tags: cve-2025-0108 cve-2024-53704 cve-2024-9474 cve-2025-0111 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-53704	Authentication Bypass in SonicWall SonicOS SSLVPN	9.8	95%	KEVRansomware	Jan 9, 2025 KEV Feb 18, 2025
CVE-2024-9474	Root Privilege Escalation via Command Injection in Palo Alto Networks PAN-OS	6.9	94%	KEVRansomwarePoC ×2	Nov 18, 2024 KEV Nov 18, 2024
CVE-2025-0108 +1 related CVE CVE-2025-0111	Authentication Bypass in Palo Alto Networks PAN-OS Management Interface	8.8 group max	98%	KEVPoC ×3	Feb 12, 2025 KEV Feb 18, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Feb 19, 2025 Threat Intelligence / Vulnerability The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting Palo Alto Networks PAN-OS and SonicWall SonicOS SSLVPN to its Known Exploited Vulnerabilities ( KEV ) catalog, based on evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.