PT-2025-11116 · Palo Alto Networks · Pan-Os

Published 2025-03-12 · Updated 2025-11-13 · CVE-2025-0116

Positive Technologies (AI Summary)

CVSS v4.0

6.8

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS (affected versions not specified)

Description: A Denial of Service (DoS) issue in the software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition cause the firewall to enter maintenance mode. This issue does not apply to Cloud NGFWs or Prisma Access software.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2025-04304

BDU:2026-00809

CVE-2025-0116

Affected Products

Pan-Os

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2025-0116 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-0116 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00809 · Security Note
• https://bdu.fstec.ru/vul/2025-04304 · Security Note
• https://t.me/cvedetector/20173 · Telegram Post
• https://twitter.com/gothburz/status/1900200889731723406 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1900002869375279230 · Twitter Post
• https://twitter.com/CVEnew/status/1899901313733059003 · Twitter Post
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-46708?fts[value]=CVE-2025-4619 · Note
• https://cybersecurity-help.cz/vdb/SB20251112168 · Note
• https://t.me/cvetracker/19014 · Telegram Post
• https://t.me/cvenotify/115109 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1900002869199167498 · Twitter Post
• https://reddit.com/r/paloaltonetworks/comments/1j9twx6/attention_cve · Reddit Post