topic CVE-2025-0108 in General Topics

CVE-2025-0108

V.Benfanti — Sun, 16 Feb 2025 19:43:07 GMT

Hello.
I was just looking at this severity 7.8 high CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface and it says PAN-OS < 11.1.6-h1 is affected. This doc Support PAN-OS Software Release Guidance | Palo Alto Networks says 11.1.4-h7 is the "preferred version" which is affected. I usually try and stick with the "preferred version" but a severity 7.8 is concerning. I'm thinking about staying with the preferred version because my web management interface is not exposed to the internet. Would love to hear what others are thinking.

Thanks!

Re: CVE-2025-0108

mshekh — Mon, 17 Feb 2025 02:25:22 GMT

Hi @V.Benfanti ,

Thanks for info, If you have restricted management interface access via only trusted internal IP addresses then it reduce the exposure factor however it's recommended to upgrade the device to fixed version to mitigate the vulnerability.

Re: CVE-2025-0108

JeromeLevesque — Wed, 19 Feb 2025 16:37:20 GMT

Exact same scenario for us.

Can we expect a new prefered version soon? I prefer to stay on prefered version, I'm waiting before updating, but our cybersecurity expert is sleeping on my doorstep. If not, i'll update to 11.1.6-h1.

Thanks!