Resource exhaustion in Palo Alto Networks Prisma Sd-Wan
CVE-2025-0122
A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device.
EPSS: 0.003 (18.0th percentile) — read the EPSS interpretation.
Affected products
- Palo Alto Networks Prisma Sd-wan — versions 6.5.0, 6.4.0, 6.3.0
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)