CVE-2025-0122CWE-770

Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

Medium · published April 11, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Amber
EPSS
0.00274 · 18.7th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-04-11T01:48Z
EPSS history
Timeline
  • 11 APR 01:48Z
    Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets
    cvelistv5