Palo Alto Products Multiple Vulnerabilities

Release Date: 13 Mar 2025 271 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities were identified in Palo Alto Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

Impact

Remote Code Execution
Denial of Service
Elevation of Privilege
Information Disclosure

System / Technologies affected

GlobalProtect App 6.0 All on Windows
GlobalProtect App 6.1 All on Windows
GlobalProtect App 6.2 versions earlier than 6.2.6 on Windows
GlobalProtect App 6.3 versions earlier than 6.3.3 on Windows
PAN-OS 10.1 versions earlier than 10.1.14-h11
PAN-OS 10.2 versions earlier than 10.2.14
PAN-OS 11.0 versions earlier than 11.0.6
PAN-OS 11.1 versions earlier than 11.1.8
PAN-OS 11.2 versions earlier than 11.2.5

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

Vulnerability Identifier

Source

Palo Alto