CVE-2025-0108 PoC — PAN-OS: Authentication Bypass in the Management Web Interface

Title:PAN-OS: Authentication Bypass in the Management Web Interface (CVE-2025-0108)
Description:An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.

Palo Alto Networks PAN-OS 身份验证绕过漏洞批量检测脚本(CVE-2025-0108)

免责申明：
本文所描述的漏洞及其复现步骤仅供网络安全研究与教育目的使用。任何人不得将本文提供的信息用于非法目的或未经授权的系统测试。
作者不对任何由于使用本文信息而导致的直接或间接损害承担责任。
如涉及侵权，请及时与我们联系，我们将尽快处理并删除相关内容。

博客地址：
https://blog.csdn.net/xc_214/article/details/145611320?spm=1001.2014.3001.5501

批量检测：

python poc.py -f url.txt

单个检测：

python poc.py -u your-ip

![image](https://github.com/user-attachments/assets/6900bdce-1907-4a28-8193-cd86c01e08f3)

![image](https://github.com/user-attachments/assets/9a4c4495-a0f5-4ad1-8383-32b99a41e911)

 [4.0K]  /data/pocs/6801b84c22548ef10c7dad9ceffd46bda9b5050a
├── [2.0K]  PanOs_CVE-2025-0108_LoginByPass.py
└── [ 743]  README.md

0 directories, 2 files