Vulnerability in Palo Alto Networks Cloud Ngfw
CVE-2025-4229
An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.
Affected products
- Palo Alto Networks Cloud Ngfw — versions All
- Palo Alto Networks Pan-os — versions 11.2.0, 11.1.0, 10.2.0
- Palo Alto Networks Prisma Access — versions All
Weakness classification (CWE)
References
- psirt@paloaltonetworks.com (vendor-advisory)