Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-0130

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access.

Published

2025-05-14T18:15:29.723

Last Modified

2025-10-06T16:18:22.213

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-754
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System paloaltonetworks pan-os < 11.1.6 Yes
Operating System paloaltonetworks pan-os < 11.2.5 Yes
Operating System paloaltonetworks pan-os 11.1.7 Yes
Operating System paloaltonetworks pan-os 11.1.7 Yes
References