VYPR
← All advisories
Low severity3.8NVD Advisory· Published Apr 11, 2025· Updated Jun 17, 2026

CVE-2025-0124

CVE-2025-0124

Description

An authenticated file deletion vulnerability in the Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files.

The attacker must have network access to the management web interface to exploit this issue. You greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue affects Cloud NGFW. However, this issue does not affect Prisma® Access software.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Paloaltonetworks/Cloud Ngfwcpe-rescue2 versions
    All+ 1 more
    • (no CPE)range: All
    • (no CPE)
  • Paloaltonetworks/Prisma Access Agentcpe-rescue
    Range: All
  • Paloaltonetworks/Panos14 versions
    cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=10.1.0,<10.1.14
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h1:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h10:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h3:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h5:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h7:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h8:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h9:*:*:*:*:*:*
    • (no CPE)
    • cpe:2.3:o:paloaltonetworks:pan-os:11.2.0:*:*:*:*:*:*:*range: 11.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.