Exploited vulnerability

CVE-2024-3393

TLP:CLEAR

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Facts

Vendor: Palo Alto Networks
Product: PAN-OS
CVSS: 8.7
EPSS (probability of exploitation within 30 days): 29.1 %
On CISA's Known Exploited Vulnerabilities list since: 30 December 2024
First known exploitation: 30 December 2024
CISA's deadline for US federal agencies: 20 January 2025
Weakness: CWE-754
First seen by Risk Letters: 30 December 2024

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD