Information Disclosure Vulnerability in Palo Alto Networks PAN-OSĀ® SD-WAN Feature
CVE-2025-4229

6MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Cloud Ngfw
Pan-os
Prisma Access
Vendor
CVE Published:
13 June 2025

Badges

šŸ‘¾ Exploit Exists

What is CVE-2025-4229?

An information disclosure vulnerability exists in the SD-WAN feature of Palo Alto Networks PAN-OSĀ® software. This security flaw allows unauthorized users to access unencrypted data transmitted from the firewall via the SD-WAN interface. To exploit this vulnerability, an attacker must be positioned in a way to intercept packets sent from the firewall, potentially exposing sensitive information. It's important to note that this vulnerability does not affect Cloud NGFW and PrismaĀ® Access services.

Affected Version(s)

PAN-OS 11.2.0 < 11.2.7

PAN-OS 11.1.0 < 11.1.10

PAN-OS 10.2.0 < 10.2.17

References

https://security.paloaltonetworks.com/CVE-2025-4229
vendor-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • šŸ‘¾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

MMS Technology
.
CVE-2025-4229 : Information Disclosure Vulnerability in Palo Alto Networks PAN-OSĀ® SD-WAN Feature