CVE-2025-0116
published 2025-03-12CVE-2025-0116: A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted…
PriorityP428medium6.8CVSS 4.0
AVAACLATNPRNUIAVCNVINVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUNRUVCREMUAmber
EPSS
0.22%
12.6th percentile
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode.
This issue does not apply to Cloud NGFWs or Prisma Access software.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| palo_alto_networks | pan-os | >= 10.1.0 < 10.1.14-h11 | 10.1.14-h11 |
| palo_alto_networks | pan-os | >= 10.2.0 < 10.2.14 | 10.2.14 |
| palo_alto_networks | pan-os | >= 11.1.0 < 11.1.8 | 11.1.8 |
| palo_alto_networks | pan-os | >= 11.2.0 < 11.2.5 | 11.2.5 |
| paloalto | cloud_ngfw | — | — |
| paloalto | pan-os | — | — |
| paloalto | prisma_access | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
vendor_paloalto·CVSS 6.8
CVE-2025-0116 [MEDIUM] CWE-754 PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode.
This issue does not apply to Cloud NGFWs or Prisma Access software.
Affected products: Cloud NGFW, PAN-OS, Prisma Access
Solution: VERSION MINOR VERSION SUGGESTED SOLUTION
PAN-OS 11.2 11.2.0 through 11.2.4 Upgrade to 11.2.5 or later
PAN-OS 11.1 11.1.0 through 11.1.7 Upgrade to 11.1.8 or later
11.1.0 through 11.1.6 Upgrade to 11.1.6-h6 or 11.1.8 or later
11.1.0 through 11.1.4 Upgrade to 11.1.4-h17 or 11.1.6-h6
GHSA
GHSA-c93v-4qmp-8w98: A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially c
ghsa_unreviewed·2025-03-12
CVE-2025-0116 [MEDIUM] CWE-754 GHSA-c93v-4qmp-8w98: A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially c
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode.
This issue does not apply to Cloud NGFWs or Prisma Access software.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-12
Published