PT-2025-6774 · Palo Alto Networks · Pan-Os

Maxime Escourbiac + 2 · Published 2025-02-12 · Updated 2025-02-22 · CVE-2025-0109

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber

Name of the Vulnerable Software and Affected Versions PAN-OS (affected versions not specified)

Description An unauthenticated file deletion issue in the management web interface of PAN-OS allows an attacker with network access to delete certain files, including limited logs and configuration files, but not system files, as the "nobody" user. The risk can be greatly reduced by restricting access to the management web interface to only trusted internal IP addresses. This issue does not affect Cloud NGFW or Prisma Access software.

Recommendations Restrict access to the management web interface to only trusted internal IP addresses according to recommended best practices deployment guidelines. As a temporary workaround, consider restricting access to the management web interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-02683

CVE-2025-0109

Affected Products

Pan-Os

References · 6

• https://security.paloaltonetworks.com/CVE-2024-0109 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02683 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0109 · Security Note
• https://twitter.com/fletch_ai/status/1893118641299955867 · Twitter Post
• https://security.paloaltonetworks.com/CVE-2025-0109 · Note
• https://twitter.com/CVEnew/status/1889784905942593668 · Twitter Post