PT-2025-33023 · Palo Alto Networks · Globalprotect

Maxime Escorbiac + 1 · Published 2025-03-10 · Updated 2025-08-26 · CVE-2025-2183

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app (affected versions not specified)

Description: An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect app allows attackers to connect the app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by those certificates.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-16020

CVE-2025-2183

Affected Products

Globalprotect

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-2183 · Security Note
• https://security.paloaltonetworks.com/CVE-2025-2183 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16020 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-2183 · Security Note
• https://twitter.com/Fisjkars/status/1956037891198455898 · Twitter Post
• https://twitter.com/CVEnew/status/1955683532333871231 · Twitter Post
• https://twitter.com/provintell/status/1957753946048770412 · Twitter Post
• https://t.me/cveNotify/132106 · Telegram Post
• https://reddit.com/r/paloaltonetworks/comments/1n0ojcx/questions_about_20252183_vulnerability · Reddit Post