CVE-2025-0111

Published: Feb 12, 2025Modified: Jun 17, 2026CISA KEV

7.1

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Red

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:RedShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.

Affected (48)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.1.0 to 10.1.14
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.7
Paloaltonetworks Pan Os	From 10.2.10 to 10.2.12
Paloaltonetworks Pan Os	From 11.0.0 to 11.1.6
Paloaltonetworks Pan Os	From 11.2.0 to 11.2.4
Paloaltonetworks Pan Os	Version 10.1.14
Paloaltonetworks Pan Os	Version 10.1.14 h2
Paloaltonetworks Pan Os	Version 10.1.14 h4
Paloaltonetworks Pan Os	Version 10.1.14 h6
Paloaltonetworks Pan Os	Version 10.1.14 h8
Paloaltonetworks Pan Os	Version 10.2.12
Paloaltonetworks Pan Os	Version 10.2.12 h1
Paloaltonetworks Pan Os	Version 10.2.12 h2
Paloaltonetworks Pan Os	Version 10.2.12 h3
Paloaltonetworks Pan Os	Version 10.2.12 h4
Paloaltonetworks Pan Os	Version 10.2.13
Paloaltonetworks Pan Os	Version 10.2.13 h1
Paloaltonetworks Pan Os	Version 10.2.13 h2
Paloaltonetworks Pan Os	Version 10.2.7
Paloaltonetworks Pan Os	Version 10.2.7 h12
Paloaltonetworks Pan Os	Version 10.2.7 h16
Paloaltonetworks Pan Os	Version 10.2.7 h18
Paloaltonetworks Pan Os	Version 10.2.7 h19
Paloaltonetworks Pan Os	Version 10.2.7 h1
Paloaltonetworks Pan Os	Version 10.2.7 h21
Paloaltonetworks Pan Os	Version 10.2.7 h3
Paloaltonetworks Pan Os	Version 10.2.7 h6
Paloaltonetworks Pan Os	Version 10.2.7 h8
Paloaltonetworks Pan Os	Version 10.2.8
Paloaltonetworks Pan Os	Version 10.2.8 h10
Paloaltonetworks Pan Os	Version 10.2.8 h13
Paloaltonetworks Pan Os	Version 10.2.8 h15
Paloaltonetworks Pan Os	Version 10.2.8 h18
Paloaltonetworks Pan Os	Version 10.2.8 h19
Paloaltonetworks Pan Os	Version 10.2.8 h3
Paloaltonetworks Pan Os	Version 10.2.8 h4
Paloaltonetworks Pan Os	Version 10.2.9
Paloaltonetworks Pan Os	Version 10.2.9 h11
Paloaltonetworks Pan Os	Version 10.2.9 h14
Paloaltonetworks Pan Os	Version 10.2.9 h16
Paloaltonetworks Pan Os	Version 10.2.9 h18
Paloaltonetworks Pan Os	Version 10.2.9 h19
Paloaltonetworks Pan Os	Version 10.2.9 h1
Paloaltonetworks Pan Os	Version 10.2.9 h9
Paloaltonetworks Pan Os	Version 11.1.6
Paloaltonetworks Pan Os	Version 11.2.4
Paloaltonetworks Pan Os	Version 11.2.4 h1
Paloaltonetworks Pan Os	Version 11.2.4 h2

Related CWEs

CWE-610

Externally Controlled Reference to a Resource in Another Sphere

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (2)

https://security.paloaltonetworks.com/CVE-2025-0111

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0111

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.