CVE-2025-0115: PAN-OS: Authenticated Admin File Read…

Record summary

CVE-2025-0115 has a selected CVSS score of 6.8 (medium).

Description

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 17, 2025 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
Cloud NGFW Browse Palo Alto Networks / Cloud NGFW Default status: unaffected	CVE List	All versions	unaffected
PAN-OS Browse Palo Alto Networks / PAN-OS Default status: unaffected	CVE List	11.2.0 to < 11.2.3	affected
		11.1.0 to < 11.1.5	affected
		11.0.0 to < 11.0.6	affected
		10.2.0 to < 10.2.11	affected
		10.1.0 to < 10.1.14-h11	affected
Prisma Access Browse Palo Alto Networks / Prisma Access Default status: unaffected	CVE List	All versions	unaffected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2025-0115

security.paloaltonetworks.comVendor advisory

https://security.paloaltonetworks.com/CVE-2025-0115