Log in Start free

Vulnerability · Published Mar 12, 2025 · Assigned by palo_alto

CVE-2025-0115PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI

Medium 6.8

In plain English

A medium-severity security flaw in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 4.0)6.8Medium
Exploit odds (30 days)0.2%top 91.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.

Affected products (as reported)

VendorProductVersions
Palo Alto Networks PAN-OS 11.2.0 – before 11.2.311.1.0 – before 11.1.511.0.0 – before 11.0.610.2.0 – before 10.2.1110.1.0 – before 10.1.14-h11
Palo Alto Networks Cloud NGFW see references
Palo Alto Networks Prisma Access see references

Weakness: CWE-41 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber

References