Zultys Security Advisory Notice - SAN25-006 Rev 1.0

Vulnerability in Palo Alto PAN-OS (CVE-2025-4615)

Severity: Medium

Published: 2025-10-14

Updated: 2025-10-14

Revision: 1.0

Evaluated Products

Zultys Cloud Services

Impacted Products

Zultys Cloud Services

Affected Releases

Not applicable

Impacted 3rd Party Products

Not applicable

Introduction

On October 9, 2025 details of an improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS software was published in the National Vulnerability Database under CVE-2025-4615.

The vulnerability enables an authenticated administrator to bypass system restrictions and execute arbitrary commands.

Description

Zultys has in place best practice network access restrictions which restrict the required CLI access to a limited group of internal administrators.

Impacted Palo Alto network products within the Zultys Cloud Services infrastructure will be upgraded in a staged approach to ensure no negative impact on services.

Customers utilizing a Palo Alto firewall to protect deployed MX systems should review the information available from Palo Alto Networks and ensure the firewall is appropriately updated and/or configured to protect against CVE-2025-4615.

Contact

If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.