Medium severity · published Apr 11, 2025
CVE-2025-0122
Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets
5.1
CVSS
0.3%
EPSS
No
On KEV
Description
A denial-of-service (DoS) vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Prisma SD-WAN · Palo Alto Networks
6.5.0 before 6.5.1; 6.4.0 before 6.4.2; 6.3.0 before 6.3.4; 6.2.0; 6.1.0 before 6.1.10 · source: vendor