Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

CVE-2025-4229 is an information disclosure vulnerability identified in the SD-WAN feature of Palo Alto Networks PAN-OS software, specifically impacting the Cloud NGFW product. The vulnerability allows an unauthorized attacker to intercept and view unencrypted data transmitted from the firewall via the SD-WAN interface. Exploitation requires the attacker to have the capability to intercept network packets sent from the affected firewall, which implies a need for network-level access or the ability to perform man-in-the-middle attacks on the SD-WAN traffic. Notably, this vulnerability does not affect Palo Alto Networks' Cloud NGFW and Prisma Access cloud services, limiting the scope to on-premises or hybrid deployments of PAN-OS with SD-WAN enabled. The CVSS 4.0 base score is 6.0, indicating a medium severity level, with the vector highlighting network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), and user interaction required (UI:P). The vulnerability impacts confidentiality (data exposure) but does not affect integrity or availability. There are no known exploits in the wild at the time of publication, and no patches or mitigations have been explicitly linked yet. The CWE classification is CWE-497, which relates to exposure of sensitive system information to unauthorized entities. This vulnerability underscores the risk of transmitting sensitive data in unencrypted form over SD-WAN interfaces, which can be intercepted by attackers with network access, potentially leading to leakage of sensitive operational or configuration data from the firewall environment.

Detailed information about CVE-2025-4229: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto Networks Cloud NGFW af

CVE-2025-4229: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto Networks Cloud NGFW - Live Threat Intelligence - Threat Radar | OffSeq.com

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-4229'

Filter Threats

Threats Tagged 'cve-2025-4229'