CVE-2025-4614: pan-os 11.1.6; +1 more affected products

Affected technology

pan-os · from 10.2.0 (inclusive), before 10.2.17 (exclusive)
paloaltonetworks

pan-os · from 11.1.0 (inclusive), before 11.1.6 (exclusive)
paloaltonetworks

pan-os · from 11.2.0 (inclusive), before 11.2.8 (exclusive)
paloaltonetworks

pan-os · 11.1.6
paloaltonetworks

pan-os · 11.1.6 · update h1
paloaltonetworks

pan-os · 11.1.6 · update h10
paloaltonetworks

pan-os · 11.1.6 · update h14
paloaltonetworks

pan-os · 11.1.6 · update h17
paloaltonetworks

pan-os · 11.1.6 · update h19
paloaltonetworks

pan-os · 11.1.6 · update h20
paloaltonetworks

pan-os · 11.1.6 · update h3
paloaltonetworks

pan-os · 11.1.6 · update h4
paloaltonetworks

pan-os · 11.1.6 · update h5
paloaltonetworks

pan-os · 11.1.6 · update h6
paloaltonetworks

pan-os · 11.1.6 · update h7
paloaltonetworks

PAN-OS · 11.2.0 to before 11.2.8; status changes: 11.2.8 — unaffected, 11.1.0 to before 11.1.12; status changes: 11.1.12 — unaffected, 10.2.0 to before 10.2.17; status changes: 10.2.17 — unaffected
Palo Alto Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Passive user interaction

What an attacker can do

The source reports that an attacker could access information they should not be able to access under the conditions described by the source. Vendor/CNA’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality impact as low; integrity and availability impact as none.