CVE-2025-0112

Published Feb 20, 2025

Last updated 8 months ago

CVSS medium 6.8

Overview

Description
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activity.
Source
psirt@paloaltonetworks.com
NVD status
Received

Risk scores

CVSS 4.0

Type
Secondary
Base score
6.8
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:D/RE:X/U:Amber
Severity
MEDIUM

Weaknesses

psirt@paloaltonetworks.com
CWE-754

Social media

Hype score
Not currently trending

  1. CVE-2025-0112 A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable … https://t.co/Br5JsvLMFA

    @CVEnew

    20 Feb 2025

    128 Impressions

    1 Retweet

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.