CVE-2025-4619: PAN-OS 11.2.0 to before 11.2.5; status changes: 11.2.5 — unaffected, 11.2.4-h4 — unaffected, 11.2.3-h6 — unaffected…

Affected technology

PAN-OS · 11.2.0 to before 11.2.5; status changes: 11.2.5 — unaffected, 11.2.4-h4 — unaffected, 11.2.3-h6 — unaffected, 11.2.2-h2 — unaffected, 11.1.0 to before 11.1.7; status changes: 11.1.7 — unaffected, 11.1.6-h1 — unaffected, 11.1.4-h13 — unaffected, 11.1.4-h4 — affected, 11.1.3-h2 — affected, 11.1.2-h18 — unaffected, 11.1.2-h9 — affected, 10.2.0 to before 10.2.14; status changes: 10.2.14 — unaffected, 10.2.13-h3 — unaffected, 10.2.12-h6 — unaffected, 10.2.11-h12 — unaffected, 10.2.10-h14 — unaffected, 10.2.10-h2 — affected, 10.2.9-h21 — unaffected, 10.2.9-h6 — affected, 10.2.8-h21 — unaffected, 10.2.8-h10 — affected, 10.2.7-h24 — unaffected, 10.2.7-h11 — affected, 10.2.4-h25 — affected
Palo Alto Networks

Prisma Access · 10.2.0 to before 10.2.10-h14; status changes: 11.2.4-h4 — unaffected, 10.2.10-h14 — unaffected, 10.2.4-h25 — affected
Palo Alto Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker can reboot a firewall by sending a specially crafted packet through the dataplane. Vendor/CNA’s CVSS 4.0 assessment (base score 6.6/10) rates confidentiality and integrity impact as none; availability impact as high.