CVE-2024-3393

Description

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

References

https://www.securityweek.com/palo-alto-networks-patches-firewall-zero-day-exploited-for-dos-attacks/

https://www.cisa.gov/news-events/alerts/2024/12/30/cisa-adds-one-known-exploited-vulnerability-catalog

https://security.paloaltonetworks.com/CVE-2024-3393

https://www.bleepingcomputer.com/news/security/hackers-exploit-dos-flaw-to-disable-palo-alto-networks-firewalls/

https://thehackernews.com/2024/12/palo-alto-releases-patch-for-pan-os-dos.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4