{"id":5851,"date":"2025-02-19T05:56:06","date_gmt":"2025-02-19T05:56:06","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/cisa-adds-palo-alto-sonicwall-to-exploited-list\/"},"modified":"2025-02-19T05:56:07","modified_gmt":"2025-02-19T05:56:07","slug":"cisa-adds-palo-alto-sonicwall-to-exploited-list","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/cisa-adds-palo-alto-sonicwall-to-exploited-list\/","title":{"rendered":"CISA Adds Palo Alto, SonicWall to Exploited List"},"content":{"rendered":"\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">February 19, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Threat Intelligence \/ Vulnerability<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEg2t-5ZBag6z3KEmpPKisPBPmKsZksN8cicSn5gOnnOXUPdj1WrOwF6LnfqMqM5kKiS59_yElpZvc1SWiH5SZYzyuXismMVjUmiwVjdL3aKt1sYY3yewWDAQ6rU-nEVWdrGTjPfkS9RGFuTBVfc3nSask8wBxEoyUQl9-5XFQrgqjnkycS8Gy90vNJneSLe\/s728-rw-e365\/cisa-kev.png\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p><\/a>\n<\/div>\n<p>The United States Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following evidence of active exploitation. The agency announced this addition on Tuesday.<\/p>\n<p>The vulnerabilities in question are:<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2025\/02\/palo-alto-networks-patches.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2025-0108<\/a><\/strong> (CVSS score: 7.8) &#8211; This is an authentication bypass vulnerability in the Palo Alto Networks PAN-OS management web interface, which allows an unauthenticated attacker with network access to bypass the required authentication and invoke specific PHP scripts.<\/li>\n<li><strong><a href=\"https:\/\/thehackernews.com\/2025\/02\/ivanti-patches-critical-flaws-in.html\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2024-53704<\/a><\/strong> (CVSS score: 8.2) &#8211; This is an improper authentication vulnerability in the SSLVPN authentication mechanism, which enables a remote attacker to bypass authentication.<\/li>\n<\/ul>\n<div class=\"dog_two clear\">\n<center class=\"cf\"><br \/>\n<a href=\"https:\/\/thehackernews.uk\/saas-security-v1-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><br \/>\n<img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhc0hgq4JZKi-PJjUZ4kdb5ficmXr3IPOg6noFF558_qZ-gXm7vb0OzXU0NzsPAxaqca2tLI5j8NgJW731W0_CuPrUerOmSrZSt4IeANQp6VAQsIAQUzv6aJsxBD6poxHfELq0bcbeevSVy5AyOb9ganALMoA140nZoLOtSb0ck2AZ5rZgb9mWDEyVsbvqK\/s728-rw-e100\/saas-security-v1-d.png\" width=\"727\" height=\"90\"\/><br \/>\n<\/a><br \/>\n<\/center>\n<\/div>\n<p>Palo Alto Networks confirmed to The Hacker News that it has observed active exploitation attempts against CVE-2025-0108. The company noted that this vulnerability could be chained with other vulnerabilities, such as CVE-2024-9474, to allow unauthorized access to unpatched and unsecured firewalls.<\/p>\n<p>&#8220;We have observed exploit attempts chaining CVE-2025-0108 with <a href=\"https:\/\/security.paloaltonetworks.com\/CVE-2024-9474\" rel=\"nofollow noopener\" target=\"_blank\">CVE-2024-9474<\/a> and <a href=\"https:\/\/security.paloaltonetworks.com\/CVE-2025-0111\" rel=\"nofollow noopener\" target=\"_blank\">CVE-2025-0111<\/a> on unpatched and unsecured PAN-OS web management interfaces,&#8221; the company stated in an updated advisory.<\/p>\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgAhbOIWhVdmewiT-RSxU00XFqTFj38d3C7Xv3Ws1JxyExmIzhjqXZ9OM82_aVihnMVNxdgwKbW6i7pARfHr4JVNqAWlCnUrSNY2zoQPZS8MuUR4uWwYPDtObPJy8p5nhVSt1669YAJ_5zlUcXjzaUWP5W_Kq2pBF-XTKcanh5vGzVednj5uh1o8Z7Kv0h4\/s728-rw-e365\/stats.png\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><br \/>\n<img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgAhbOIWhVdmewiT-RSxU00XFqTFj38d3C7Xv3Ws1JxyExmIzhjqXZ9OM82_aVihnMVNxdgwKbW6i7pARfHr4JVNqAWlCnUrSNY2zoQPZS8MuUR4uWwYPDtObPJy8p5nhVSt1669YAJ_5zlUcXjzaUWP5W_Kq2pBF-XTKcanh5vGzVednj5uh1o8Z7Kv0h4\/s728-rw-e365\/stats.png\" alt=\"\" border=\"0\" data-original-height=\"1636\" data-original-width=\"3066\"\/><br \/>\n<\/a>\n<\/div>\n<p>Threat intelligence firm GreyNoise reported that as many as 25 malicious IP addresses are actively exploiting CVE-2025-0108, with the volume of attacker activity surging 10 times since its detection nearly a week ago. The top three sources of attack traffic are the United States, Germany, and the Netherlands.<\/p>\n<p>Regarding CVE-2024-53704, cybersecurity company Arctic Wolf revealed that threat actors are weaponizing the flaw shortly after a proof-of-concept (PoC) was made available by Bishop Fox.<\/p>\n<p>In response to the active exploitation, Federal Civilian Executive Branch (FCEB) agencies are required to remediate the identified vulnerabilities by March 11, 2025, to secure their networks.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Found this article interesting? Follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/cisa-adds-palo-alto-networks-and.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue802February 19, 2025\ue804Ravie LakshmananThreat Intelligence \/ Vulnerability The United States Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following evidence&#8230;<\/p>\n","protected":false},"author":19,"featured_media":5852,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-5851","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/cisa-kev.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=5851"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5851\/revisions"}],"predecessor-version":[{"id":5853,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5851\/revisions\/5853"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/5852"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=5851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=5851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=5851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}