CVE-2025-0114Medium

CVE-2025-0114 PAN-OS: Denial of Service (DoS) in GlobalProtect

Published
March 12, 2025
Last Modified
March 12, 2025

🔗 CVE IDs covered (1)

CVE-2025-0114 →

📋 Description

A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software.

🎯 Affected products3

  • PAN-OS
  • Cloud NGFW
  • Prisma Access

✅ Remediation

VERSION MINOR VERSION SUGGESTED SOLUTION PAN-OS 11.0 11.0.0 through 11.0.1 Upgrade to 11.0.2 or later PAN-OS 10.2 10.2.0 through 10.2.4 Upgrade to 10.2.5 or later PAN-OS 10.1 10.1.0 through 10.1.14 Upgrade to 10.1.14-h11 or later All other older   Upgrade to a supported fixed version. unsupported PAN-OS versions Workarounds and mitigations: No workaround or mitigation is available.

🔗 References (1)