QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-2182

Back to search

CVE-2025-2182

Published: Aug 13, 2025

Modified: Aug 13, 2025

PUBLISHED

Description

A problem with the implementation of the MACsec protocol in Palo Alto Networks PAN-OS® results in the cleartext exposure of the connectivity association key (CAK). This issue is only applicable to PA-7500 Series devices which are in an NGFW cluster. A user who possesses this key can read messages being sent between devices in a NGFW Cluster. There is no impact in non-clustered firewalls or clusters of firewalls that do not enable MACsec.

VendorProductVersions

Palo Alto Networks

Cloud NGFW

unaffected
All - < 3.2.449

Palo Alto Networks

PAN-OS

affected
11.2.0 - < 11.2.8
affected
11.1.0 - < 11.1.10
unaffected
10.2.0
unaffected
10.1.0

Palo Alto Networks

PAN-OS

unaffected
All

Palo Alto Networks

Prisma Access

unaffected
All

Weaknesses (CWE)

CWE-312

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now