PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface

🗓️ 12 Feb 2025 17:00:00Reported by Palo Alto Networks Product Security Incident Response TeamType

paloalto

paloalto🔗 securityadvisories.paloaltonetworks.com👁 24 Views

Unauthenticated deletion vulnerability in PAN-OS allows file deletions via management interface access.

Reporter	Title	Published	Views	Family All 30
BDU FSTEC	The vulnerability of the PAN-OS operating system, related to incorrect external management of file names or file paths, allows attackers to delete any files they desire.	13 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cuobjdump utility in the NVIDIA CUDA Toolkit, a parallel computing software tool, allows a malicious actor to cause a system failure.	1 Nov 202500:00	–	bdu_fstec
Circl	CVE-2024-0109	31 Aug 202411:42	–	circl
Circl	CVE-2025-0109	12 Feb 202516:00	–	circl
CNNVD	NVIDIA CUDA toolkit 缓冲区错误漏洞	31 Aug 202400:00	–	cnnvd
CNNVD	Palo Alto Networks PAN-OS 安全漏洞	12 Feb 202500:00	–	cnnvd
CVE	CVE-2024-0109	31 Aug 202408:24	–	cve
CVE	CVE-2025-0109	12 Feb 202520:56	–	cve
Cvelist	CVE-2024-0109	31 Aug 202408:24	–	cvelist
Cvelist	CVE-2025-0109 PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface	12 Feb 202520:56	–	cvelist

Vulners

Node

paloaltonetworks pan-osMatch11.2.4h3

OR

paloaltonetworks pan-osMatch11.2.4h2

OR

paloaltonetworks pan-osMatch11.2.4h1

OR

paloaltonetworks pan-osMatch11.2.4

OR

paloaltonetworks pan-osMatch11.2.3

OR

paloaltonetworks pan-osMatch11.2.2

OR

paloaltonetworks pan-osMatch11.2.1

OR

paloaltonetworks pan-osMatch11.2.0

OR

paloaltonetworks pan-osMatch11.1.6

OR

paloaltonetworks pan-osMatch11.1.5

OR

paloaltonetworks pan-osMatch11.1.4h12

OR

paloaltonetworks pan-osMatch11.1.4h11

OR

paloaltonetworks pan-osMatch11.1.4h10

OR

paloaltonetworks pan-osMatch11.1.4h9

OR

paloaltonetworks pan-osMatch11.1.4h8

OR

paloaltonetworks pan-osMatch11.1.4h7

OR

paloaltonetworks pan-osMatch11.1.4h6

OR

paloaltonetworks pan-osMatch11.1.4h5

OR

paloaltonetworks pan-osMatch11.1.4h4

OR

paloaltonetworks pan-osMatch11.1.4h3

OR

paloaltonetworks pan-osMatch11.1.4h2

OR

paloaltonetworks pan-osMatch11.1.4h1

OR

paloaltonetworks pan-osMatch11.1.4

OR

paloaltonetworks pan-osMatch11.1.3

OR

paloaltonetworks pan-osMatch11.1.2h17

OR

paloaltonetworks pan-osMatch11.1.2h16

OR

paloaltonetworks pan-osMatch11.1.2h15

OR

paloaltonetworks pan-osMatch11.1.2h14

OR

paloaltonetworks pan-osMatch11.1.2h13

OR

paloaltonetworks pan-osMatch11.1.2h12

OR

paloaltonetworks pan-osMatch11.1.2h11

OR

paloaltonetworks pan-osMatch11.1.2h10

OR

paloaltonetworks pan-osMatch11.1.2h9

OR

paloaltonetworks pan-osMatch11.1.2h8

OR

paloaltonetworks pan-osMatch11.1.2h7

OR

paloaltonetworks pan-osMatch11.1.2h6

OR

paloaltonetworks pan-osMatch11.1.2h5

OR

paloaltonetworks pan-osMatch11.1.2h4

OR

paloaltonetworks pan-osMatch11.1.2h3

OR

paloaltonetworks pan-osMatch11.1.2h2

OR

paloaltonetworks pan-osMatch11.1.2h1

OR

paloaltonetworks pan-osMatch11.1.2

OR

paloaltonetworks pan-osMatch11.1.1

OR

paloaltonetworks pan-osMatch11.1.0

OR

paloaltonetworks pan-osMatch10.2.13h2

OR

paloaltonetworks pan-osMatch10.2.13h1

OR

paloaltonetworks pan-osMatch10.2.13

OR

paloaltonetworks pan-osMatch10.2.12h5

OR

paloaltonetworks pan-osMatch10.2.12h4

OR

paloaltonetworks pan-osMatch10.2.12h3

OR

paloaltonetworks pan-osMatch10.2.12h2

OR

paloaltonetworks pan-osMatch10.2.12h1

OR

paloaltonetworks pan-osMatch10.2.12

OR

paloaltonetworks pan-osMatch10.2.11h11

OR

paloaltonetworks pan-osMatch10.2.11h10

OR

paloaltonetworks pan-osMatch10.2.11h9

OR

paloaltonetworks pan-osMatch10.2.11h8

OR

paloaltonetworks pan-osMatch10.2.11h7

OR

paloaltonetworks pan-osMatch10.2.11h6

OR

paloaltonetworks pan-osMatch10.2.11h5

OR

paloaltonetworks pan-osMatch10.2.11h4

OR

paloaltonetworks pan-osMatch10.2.11h3

OR

paloaltonetworks pan-osMatch10.2.11h2

OR

paloaltonetworks pan-osMatch10.2.11h1

OR

paloaltonetworks pan-osMatch10.2.11

OR

paloaltonetworks pan-osMatch10.2.10h13

OR

paloaltonetworks pan-osMatch10.2.10h12

OR

paloaltonetworks pan-osMatch10.2.10h11

OR

paloaltonetworks pan-osMatch10.2.10h10

OR

paloaltonetworks pan-osMatch10.2.10h9

OR

paloaltonetworks pan-osMatch10.2.10h8

OR

paloaltonetworks pan-osMatch10.2.10h7

OR

paloaltonetworks pan-osMatch10.2.10h6

OR

paloaltonetworks pan-osMatch10.2.10h5

OR

paloaltonetworks pan-osMatch10.2.10h4

OR

paloaltonetworks pan-osMatch10.2.10h3

OR

paloaltonetworks pan-osMatch10.2.10h2

OR

paloaltonetworks pan-osMatch10.2.10h1

OR

paloaltonetworks pan-osMatch10.2.10

OR

paloaltonetworks pan-osMatch10.2.9h20

OR

paloaltonetworks pan-osMatch10.2.9h19

OR

paloaltonetworks pan-osMatch10.2.9h18

OR

paloaltonetworks pan-osMatch10.2.9h17

OR

paloaltonetworks pan-osMatch10.2.9h16

OR

paloaltonetworks pan-osMatch10.2.9h15

OR

paloaltonetworks pan-osMatch10.2.9h14

OR

paloaltonetworks pan-osMatch10.2.9h13

OR

paloaltonetworks pan-osMatch10.2.9h12

OR

paloaltonetworks pan-osMatch10.2.9h11

OR

paloaltonetworks pan-osMatch10.2.9h10

OR

paloaltonetworks pan-osMatch10.2.9h9

OR

paloaltonetworks pan-osMatch10.2.9h8

OR

paloaltonetworks pan-osMatch10.2.9h7

OR

paloaltonetworks pan-osMatch10.2.9h6

OR

paloaltonetworks pan-osMatch10.2.9h5

OR

paloaltonetworks pan-osMatch10.2.9h4

OR

paloaltonetworks pan-osMatch10.2.9h3

OR

paloaltonetworks pan-osMatch10.2.9h2

OR

paloaltonetworks pan-osMatch10.2.9h1

OR

paloaltonetworks pan-osMatch10.2.9

OR

paloaltonetworks pan-osMatch10.2.8h20

OR

paloaltonetworks pan-osMatch10.2.8h19

OR

paloaltonetworks pan-osMatch10.2.8h18

OR

paloaltonetworks pan-osMatch10.2.8h17

OR

paloaltonetworks pan-osMatch10.2.8h16

OR

paloaltonetworks pan-osMatch10.2.8h15

OR

paloaltonetworks pan-osMatch10.2.8h14

OR

paloaltonetworks pan-osMatch10.2.8h13

OR

paloaltonetworks pan-osMatch10.2.8h12

OR

paloaltonetworks pan-osMatch10.2.8h11

OR

paloaltonetworks pan-osMatch10.2.8h10

OR

paloaltonetworks pan-osMatch10.2.8h9

OR

paloaltonetworks pan-osMatch10.2.8h8

OR

paloaltonetworks pan-osMatch10.2.8h7

OR

paloaltonetworks pan-osMatch10.2.8h6

OR

paloaltonetworks pan-osMatch10.2.8h5

OR

paloaltonetworks pan-osMatch10.2.8h4

OR

paloaltonetworks pan-osMatch10.2.8h3

OR

paloaltonetworks pan-osMatch10.2.8h2

OR

paloaltonetworks pan-osMatch10.2.8h1

OR

paloaltonetworks pan-osMatch10.2.8

OR

paloaltonetworks pan-osMatch10.2.7h23

OR

paloaltonetworks pan-osMatch10.2.7h22

OR

paloaltonetworks pan-osMatch10.2.7h21

OR

paloaltonetworks pan-osMatch10.2.7h20

OR

paloaltonetworks pan-osMatch10.2.7h19

OR

paloaltonetworks pan-osMatch10.2.7h18

OR

paloaltonetworks pan-osMatch10.2.7h17

OR

paloaltonetworks pan-osMatch10.2.7h16

OR

paloaltonetworks pan-osMatch10.2.7h15

OR

paloaltonetworks pan-osMatch10.2.7h14

OR

paloaltonetworks pan-osMatch10.2.7h13

OR

paloaltonetworks pan-osMatch10.2.7h12

OR

paloaltonetworks pan-osMatch10.2.7h11

OR

paloaltonetworks pan-osMatch10.2.7h10

OR

paloaltonetworks pan-osMatch10.2.7h9

OR

paloaltonetworks pan-osMatch10.2.7h8

OR

paloaltonetworks pan-osMatch10.2.7h7

OR

paloaltonetworks pan-osMatch10.2.7h6

OR

paloaltonetworks pan-osMatch10.2.7h5

OR

paloaltonetworks pan-osMatch10.2.7h4

OR

paloaltonetworks pan-osMatch10.2.7h3

OR

paloaltonetworks pan-osMatch10.2.7h2

OR

paloaltonetworks pan-osMatch10.2.7h1

OR

paloaltonetworks pan-osMatch10.2.7

OR

paloaltonetworks pan-osMatch10.2.6

OR

paloaltonetworks pan-osMatch10.2.5

OR

paloaltonetworks pan-osMatch10.2.4

OR

paloaltonetworks pan-osMatch10.2.3

OR

paloaltonetworks pan-osMatch10.2.2

OR

paloaltonetworks pan-osMatch10.2.1

OR

paloaltonetworks pan-osMatch10.2.0

OR

paloaltonetworks pan-osMatch10.1.14h8

OR

paloaltonetworks pan-osMatch10.1.14h7

OR

paloaltonetworks pan-osMatch10.1.14h6

OR

paloaltonetworks pan-osMatch10.1.14h5

OR

paloaltonetworks pan-osMatch10.1.14h4

OR

paloaltonetworks pan-osMatch10.1.14h3

OR

paloaltonetworks pan-osMatch10.1.14h2

OR

paloaltonetworks pan-osMatch10.1.14h1

OR

paloaltonetworks pan-osMatch10.1.14

OR

paloaltonetworks pan-osMatch10.1.13

OR

paloaltonetworks pan-osMatch10.1.12

OR

paloaltonetworks pan-osMatch10.1.11

OR

paloaltonetworks pan-osMatch10.1.10

OR

paloaltonetworks pan-osMatch10.1.9

OR

paloaltonetworks pan-osMatch10.1.8

OR

paloaltonetworks pan-osMatch10.1.7

OR

paloaltonetworks pan-osMatch10.1.6

OR

paloaltonetworks pan-osMatch10.1.5

OR

paloaltonetworks pan-osMatch10.1.4

OR

paloaltonetworks pan-osMatch10.1.3

OR

paloaltonetworks pan-osMatch10.1.2

OR

paloaltonetworks pan-osMatch10.1.1

OR

paloaltonetworks pan-osMatch10.1.0

Source	Link
security	www.security.paloaltonetworks.com/CVE-2024-0109

12 Feb 2025 17:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 42.1

CVSS 3.13.3

EPSS0.00608

SSVC

unauthenticated deletion vulnerability pan-os management interface attacker network access secure management access trusted internal ip addresses