Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0136

Опубликовано: 14 мая 2025
Источник: nvd
EPSS Низкий

Описание

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec.

This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls.

NOTE: The AES-128-CCM encryption algorithm is not recommended for use.

EPSS

Процентиль: 9%
0.00032
Низкий

Дефекты

CWE-319

Связанные уязвимости

github
9 месяцев назад

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use.

CVSS3: 5.4
fstec
9 месяцев назад

Уязвимость алгоритма шифрования AES-128-CCM операционной системы PAN-OS межсетевых экранов Palo Alto Networks PA-7500, PA 5400, PA 5400f, PA 3400, PA 1400 и PA 400, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 9%
0.00032
Низкий

Дефекты

CWE-319