Serial number: AV25-081
Date: February 12, 2025
Updated: February 19, 2025
On February 12, 2025, Palo Alto Networks published security advisories to address vulnerabilities in multiple products. Included were updates for the following:
- PAN-OS 11.2 – versions prior to 11.2.4-h4
- PAN-OS 11.1 – versions prior to 11.1.6-h1
- PAN-OS 10.2 – multiple versions
- PAN-OS 10.1 – versions prior to10.1.14-h9
Update 1
On February 18 and 20, 2025, CISA added CVE-2025-0108 and CVE-2025-0111 to their Known Exploited Vulnerabilities (KEV) Catalog.
On February 19, 2025, Palo Alto updated their advisory to indicate that these vulnerabilities have been exploited.
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.