What is the CVSS score of EUVD-2025-18245?

EUVD-2025-18245 has a CVSS 4.0 base score of 6.0 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber. EPSS exploitation probability: 0.1%.

Which versions of Paloalto are affected by EUVD-2025-18245?

CVE-2025-4229 presents moderate security risk rated CVSS 6.0. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate EUVD-2025-18245?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Paloalto EUVD-2025-18245

| CVE-2025-4229 MEDIUM

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)

2025-06-13 psirt@paloaltonetworks.com

Information Disclosure Paloalto

6.0

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/U:Amber

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

11.1.10,10.1.14-h16,11.2.7

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2025-18245

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

CVE Published

Jun 13, 2025 - 06:15 nvd

MEDIUM 6.0

DescriptionNVD

An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall.

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Analysis

Cloud NGFW and Prisma® Access are not affected by this vulnerability.

Technical ContextAI

Information disclosure occurs when an application inadvertently reveals sensitive data to unauthorized actors through error messages, logs, or improper access controls.

RemediationAI

Implement proper access controls. Sanitize error messages in production. Review logging practices to avoid capturing sensitive data.

EUVD-2025-18245 vulnerability details – vuln.today

Back