Medium severity · published Mar 12, 2025
CVE-2025-0116
PAN-OS: Firewall Denial of Service (DoS) Using a Specially Crafted LLDP Frame
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
A Denial of Service (DoS) vulnerability in Palo Alto Networks PAN-OS software causes the firewall to unexpectedly reboot when processing a specially crafted LLDP frame sent by an unauthenticated adjacent attacker. Repeated attempts to initiate this condition causes the firewall to enter maintenance mode.
This issue does not apply to Cloud NGFWs or Prisma Access software.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
PAN-OS · Palo Alto Networks
11.2.0 before 11.2.5; 11.1.0 before 11.1.8; 10.2.0 before 10.2.14; 10.1.0 before 10.1.14-h11 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0116
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0116
security.paloaltonetworks.com
https://security.paloaltonetworks.com/CVE-2025-0116
More from PAN-OS
10.0
CVE-2024-3400
PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
10.0
CVE-2020-2021
PAN-OS: Authentication Bypass in SAML Authentication
9.8
CVE-2026-109618
RCE via OOM corruption
9.8
CVE-2026-0300
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
9.8
CVE-2024-0012
PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)