CVE-2025-0122 | THREATINT

Description

A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device.

PUBLISHED Reserved 2024-12-20 | Published 2025-04-11 | Updated 2025-04-11 | Assigner palo_alto

MEDIUM: 5.1CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:Y/R:A/V:D/RE:L/U:Amber

Problem types

CWE-770 Allocation of Resources Without Limits or Throttling

Product status

Default status

unaffected

6.5.0 (custom) before 6.5.1

affected

6.4.0 (custom) before 6.4.2

affected

6.3.0 (custom) before 6.3.4

affected

6.2.0 (custom)

affected

6.1.0 (custom) before 6.1.10

affected

Timeline

2025-04-09:

Initial Publication

Credits

Vajrapu Venkata Sarat Kumar of Palo Alto Networks finder

References

security.paloaltonetworks.com/CVE-2025-0122 vendor-advisory

cve.org (CVE-2025-0122)

nvd.nist.gov (CVE-2025-0122)

Download JSON