CVE-2025-0114CWE-400

PAN-OS: Denial of Service (DoS) in GlobalProtect

High · published March 12, 2025

CVSS v4.0
8.2
EPSS
0%
Percentile
34.5
In the wild
Unconfirmed
What it is

A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway.

This issue does not apply to Cloud NGFWs or Prisma Access software.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:C/U:Amber
EPSS
0.00413 · 34.5th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-03-12T18:20Z
EPSS history
Timeline
  • 12 MAR 18:20Z
    PAN-OS: Denial of Service (DoS) in GlobalProtect
    cvelistv5