CVE-2025-0114

HIGH

Palo Alto Networks PAN-OS >= 10.1.0 < 10.1.14 - Unauthenticated Denial of Service via GlobalProtect Packet Flood

Title source: llm
STIX 2.1

Description

A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://security.paloaltonetworks.com/CVE-2025-0114

Scores

CVSS v3 7.5
EPSS 0.0021
EPSS Percentile 43.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (2)
paloaltonetworks/pan-os 10.1.14 h1 (10 CPE variants)
paloaltonetworks/pan-os 10.1.0 - 10.1.14
Published Mar 12, 2025
Tracked Since Feb 18, 2026