VULNERABILITY INTELLIGENCE

CVE-2024-3393

CVSS score7.5 HIGH
EPSS probability29.12%
CISA KEVKnown exploited vulnerability
Published2024-12-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Known Exploited Vulnerability

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Vendor / product: Palo Alto Networks / PAN-OS

Description

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Weakness classification

  • psirt@paloaltonetworks.com: CWE-754
  • nvd@nist.gov: CWE-754

Primary references