Palo Alto Networks Prisma SD-WAN ION Improper Certificate Validation Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability allowing improper certificate validation has been identified in Palo Alto Networks Prisma SD-WAN ION. This issue enables a man-in-the-middle (MitM) attacker to impersonate the controller. The vulnerability exists in versions 6.5.1 prior to 6.5.3-b15, 6.4.1 prior to 6.4.3-b8, and 6.3.1 prior to 6.3.6-b10.

Impact

Exploitation of this vulnerability could lead to man-in-the-middle attacks, allowing an attacker to impersonate the controller and potentially intercept or manipulate communications.

Remediation

Users can upgrade to Prisma SD-WAN ION 6.5.3-b15 or later, 6.4.3-b8 or later, or 6.3.6-b10 or later. For those using versions 6.1 or 5.6, no action is needed.