Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-0128


A denial-of-service (DoS) vulnerability in the Simple Certificate Enrollment Protocol (SCEP) authentication feature of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to initiate system reboots using a maliciously crafted packet. Repeated attempts to initiate a reboot causes the firewall to enter maintenance mode. Cloud NGFW is not affected by this vulnerability. Prisma® Access software is proactively patched and protected from this issue.


Published

2025-04-11T02:15:19.253

Last Modified

2025-04-11T15:39:52.920

Status

Awaiting Analysis

Source

[email protected]

Severity

-

Weaknesses
  • Type: Secondary
    CWE-754

Affected Vendors & Products

-


References