CVE-2025-4229CWE-497

PAN-OS: Traffic Information Disclosure Vulnerability

Medium · published June 13, 2025

CVSS v4.0
6.0
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber
EPSS
0.00505 · 42.3th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-06-13T05:42Z
EPSS history
Timeline
  • 13 JUN 05:42Z
    PAN-OS: Traffic Information Disclosure Vulnerability
    cvelistv5