Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-0130

PAN-OS: Firewall Denial-of-Service (DoS) in the Web-Proxy Feature via a Burst of Maliciously Crafted Packets

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A missing exception check in Palo Alto Networks PAN-OS® software with the web proxy feature enabled allows an unauthenticated attacker to send a burst of maliciously crafted packets that causes the firewall to become unresponsive and eventually reboot. Repeated successful attempts to trigger this condition will cause the firewall to enter maintenance mode. This issue does not affect Cloud NGFW or Prisma Access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 11.2.0 to < 11.2.5affected
  • 11.1.0 to < 11.1.6-h1affected
  • 10.2.0unaffected
  • 10.1.0unaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References