Vulnerability Description
A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large number of specially crafted packets over a period of time. This issue affects both the GlobalProtect portal and the GlobalProtect gateway. This issue does not apply to Cloud NGFWs or Prisma Access software.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | >= 10.1.0, < 10.1.14 |
Related Weaknesses (CWE)
References
- https://security.paloaltonetworks.com/CVE-2025-0114Vendor Advisory
FAQ
What is CVE-2025-0114?
CVE-2025-0114 is a vulnerability with a CVSS score of 7.5 (HIGH). A Denial of Service (DoS) vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to render the service unavailable by sending a large numb...
How severe is CVE-2025-0114?
CVE-2025-0114 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-0114?
Check the references section above for vendor advisories and patch information. Affected products include: Paloaltonetworks Pan-Os.