CVE-2025-0108

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description An authentication bypass vulnerability in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS. The vulnerability is being actively exploited, with over 30 unique IPs reported attempting exploitation. It is estimated that over 4,400 devices are exposed, mainly in the US, Germany, and the Netherlands.

Recommendations To resolve the issue, update the OpenConfig Plugin to version 2.1.2 or later on all PAN-OS firewalls immediately. If the OpenConfig Plugin is not needed, disable or uninstall it from the PAN-OS. Restrict access to the PAN-OS management interface by allowing only trusted network addresses.