Demo of the CyCognito PlatformSee the CyCognito platform in action to understand how it can help you identify, prioritize and eliminate your most critical risks. More...
State of External Exposure Management, Summer 2024 EditionDownload the report now to stay ahead of emerging threats and strengthen your organization’s security posture for 2024. More...
The Total Economic Impact™ of The CyCognito PlatformRead The Total Economic Impact™ of The CyCognito Platform — a Forrester study. Cost Savings And Business Benefits Enabled By The CyCognito Platform. More...
External Exposure & Attack Surface Management For DummiesAs your attack surface has grown to cloud infrastructures and across subsidiaries, attackers are looking for and finding unknown and unmanaged assets to serve as their entry points. More...
On February 12, 2025, Palo Alto Networks announced CVE-2025-0108, a high severity (8.8) authentication bypass vulnerability affecting Palo Alto Networks PAN-OS management web interface.
Successful exploitation of this vulnerability allows unauthenticated attackers with network access to invoke certain PHP scripts without proper authentication. While it does not lead to remote code execution, it impacts the confidentiality and integrity of the affected system.
Cloud NGFW and Prisma Access assets are not affected by this vulnerability. The following PAN-OS versions are affected by CVE-2025-0108:
Note that PAN-OS 11.0 reached end of life (EOL) in November 2024. Because of this, no additional fixes will be released for this version and users are advised to upgrade to a supported version.
Palo Alto Networks has released patches for CVE-2025-0108:
Palo Alto Networks had indicated that the risk from this vulnerability is highest if traffic from external IP addresses is able to access the management interface, either directly or through a dataplane interface that includes a management interface portal. This risk can be reduced by using a jump box to restrict access to only trusted IP addresses.
There is a public proof of concept (PoC) available for CVE-2025-0108. Palo Alto Networks also has observed active attempts to exploit this vulnerability in the wild, including attempts to chain CVE-2025-0108 to CVE-2024-9474 on unpatched and unsecured PAN-OS web management interfaces.
CyCognito published an emerging threat advisory within the CyCognito platform and advises customers to review assets running PAN-OS management services on HTTP/HTTPS ports (e.g., TCP/443, TCP/4443) to assess exposure, even if they are not explicitly identified as running vulnerable versions. While HTTPS is the standard for secure access to the PAN-OS management web interface, HTTP may still be in use due to misconfigurations or non-standard deployments.
Figure 1: The alert sent by CyCognito for CVE-2025-0108
CyCognito is an exposure management platform that reduces risk by discovering, testing and prioritizing security issues. The platform scans billions of websites, cloud applications and APIs and uses advanced AI to identify the most critical risks and guide remediation. Emerging companies, government agencies and Fortune 500 organizations rely on CyCognito to secure and protect from growing threats. Want to see how it works? Check out our website and explore our platform with a self-guided, interactive dashboard product tour. To learn how CyCognito can help you understand your external attack surface and exposed risks, please visit our Contact Us page to schedule a demo.
Download the report now to stay ahead of emerging threats and strengthen your organization’s security posture for 2024.
Download the report to learn about the historical trends behind the emergence of exposure management, how to develop a strategic plan and assemble a team to smoothly transition frameworks, and example tech stacks to consider for your organization.
Get a free scan of your attack surface and gain valuable insight into your organization's risk posture by allowing CyCognito to discover, contextualize, and test externally exposed assets on a portion of your parent company or a single subsidiary.
CyCognito solves one of the most fundamental business problems in cybersecurity: seeing how attackers view your organization, where they are most likely to break in, what systems and assets are at risk and how you can eliminate the exposure.
Founded by national intelligence agency veterans, CyCognito has a deep understanding of how attackers exploit blind spots and a path of least resistance. Based in Palo Alto, CyCognito serves a number of large enterprises and Fortune 500 organizations, including Colgate-Palmolive, Tesco and many others.
For more information, follow us on Twitter @cycognito.
Privacy Policy Terms of Service Sitemap