Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-0136

PAN-OS: Unencrypted Data Transfer when using AES-128-CCM on Intel-based hardware devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

Using the AES-128-CCM algorithm for IPSec on certain Palo Alto Networks PAN-OS® firewalls (PA-7500, PA-5400, PA-5400f, PA-3400, PA-1600, PA-1400, and PA-400 Series) leads to unencrypted data transfer to devices that are connected to the PAN-OS firewall through IPSec. This issue does not affect Cloud NGFWs, Prisma® Access instances, or PAN-OS VM-Series firewalls. NOTE: The AES-128-CCM encryption algorithm is not recommended for use.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 11.2.0unaffected
  • 11.1.0 to < 11.1.5affected
  • 11.0.0 to < 11.0.7affected
  • 10.2.0 to < 10.2.11affected
  • 10.1.0 to < 10.1.14-h14affected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References