CyberCVE

CVE-2025-0116

PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame

Severity
Medium 6.8
CVSS 4.0
Exploited
Not listed
EPSS
0.002
12.7th percentile
Discovered by
Third party
Published by the vendor
Published
Mar 12, 2025
Assigned by palo_alto

Description

A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode. This issue does not apply to Cloud NGFWs or Prisma Access software.

Weakness: CWE-754

Affected products

Vendor Product Category Matched by
Palo Alto Networks Cloud NGFW Firewall / NGFW cna-assigner
Palo Alto Networks PAN-OS Firewall / NGFW cna-assigner
Palo Alto Networks Prisma Access SASE / SSE / Secure Web cna-assigner
Vendor-reported affected versions (3)
  • Palo Alto Networks · PAN-OS
  • Palo Alto Networks · Cloud NGFW
  • Palo Alto Networks · Prisma Access

Credit

an external reporter

Vendor remediation

Version Minor Version Suggested Solution PAN-OS 11.2 11.2.0 through 11.2.4 Upgrade to 11.2.5 or later PAN-OS 11.111.1.0 through 11.1.7 Upgrade to 11.1.8 or later PAN-OS 11.0 (EoL) Upgrade to a supported fixed versionPAN-OS 10.210.2.13Upgrade to 10.2.13-h5 or 10.2.14 or later  10.2.0 through 10.2.13 Upgrade to 10.2.14 or later PAN-OS 10.1 10.1.0 through 10.1.14Upgrade to 10.1.14-h11 or laterAll other older unsupported PAN-OS versions Upgrade to a supported fixed version.

References