SecuriTricks - CVE-2025-2183

Description

An insufficient certificate validation issue in the Palo Alto Networks GlobalProtect™ app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.

Product(s) Impacted

Vendor	Product	Versions
Palo Alto Networks	Globalprotect	*

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	palo_alto_networks	globalprotect	/	/	/	/	/	/	/	/

References

https://security.paloaltonetworks.com/CVE-2025-2183

CVSS Score

5.3 / 10

CVSS Data - 4.0

Attack Vector: PHYSICAL
Attack Complexity: LOW
Attack Requirements: PRESENT
Privileges Required: NONE
User Interaction: PASSIVE
Scope:
Confidentiality Impact: HIGH
Integrity Impact: HIGH
Availability Impact: NONE
Exploit Maturity: NOT_DEFINED

CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:X/U:Amber

View Vector String

Timeline

Published: Aug. 13, 2025, 5:15 p.m.
Last Modified: Aug. 13, 2025, 5:33 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

psirt@paloaltonetworks.com

CVE-2025-2183