Security News > 2025 > January > Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

2025-01-23 15:13
An exhaustive evaluation of three firewall models from Palo Alto Networks has uncovered a host of known security flaws impacting the devices' firmware as well as misconfigured security features. "These weren't obscure, corner-case vulnerabilities," security vendor Eclypsium said in a report shared with The Hacker News. "Instead these were very well-known issues that we wouldn't expect to see
News URL
https://thehackernews.com/2025/01/palo-alto-firewalls-found-vulnerable-to.html
Related news
- Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software (source)
- Hackers exploit authentication bypass in Palo Alto Networks PAN-OS (source)
- Hackers exploit KerioControl firewall flaw to steal admin CSRF tokens (source)
- Fortinet warns of auth bypass zero-day exploited to hijack firewalls (source)
- New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344) (source)
- Zyxel warns of bad signature update causing firewall boot loops (source)
- SonicWall firewall exploit lets hackers hijack VPN sessions, patch now (source)
- Fortinet discloses second firewall auth bypass patched in January (source)
- Mysterious Palo Alto firewall reboots? You're not alone (source)
- SonicWall firewall bug leveraged in attacks after PoC exploit release (source)