← Back to CVE List
Vulnerability Analysis
PAN-OS: Authentication Bypass in the Management Web Interface

CVE-2025-0108

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.

CISA KEV Nuclei Template
CVSS Base Score
8.8
HIGH
Exploitability:-
Impact Score:-
Temporal Score:-
EPSS:98.34%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2025-02-18
Ransomware Use
Unknown
KEV Due Date
2025-03-11
VulnCheck In-the-Wild
No
Nuclei Template
YES
EPSS Score
98.338%
EPSS Percentile
99.9th pct
GitHub Severity
HIGH
SSVC Exploitation
SSVC Automatable
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD