CVE-2025-0128

The CVE-2025-0128 DoS exists in Palo Alto Networks PAN-OS SCEP authentication, allowing an unauthenticated attacker to reboot the firewall and push it into maintenance mode. Cloud NGFW is not affected; Prisma Access is patched. Affected PAN-OS versions include 10.1.x (<10.1.14-h11), 10.2.x (&l...

Simple Certificate Enrollment Protocol DoS

The vulnerability of the Simple Certificate Enrollment Protocol SCEP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2021-3060

An OS command injection vulnerability in the Simple Certificate Enrollment Protocol SCEP feature of PAN-OS software allows an unauthenticated network-based attacker with specific knowledge of the firewall configuration to execute arbitrary code with root user privileges. The attacker must have...