Description
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Cloud NGFW | — |
| Palo Alto Networks | PAN-OS | >= 11.2.0, < 11.2.3; >= 11.1.0, < 11.1.2-h16; >= 10.2.8, < 10.2.8-h19; >= 10.1.14, < 10.1.14-h8 |
| Palo Alto Networks | PAN-OS | >= 11.2.0, < 11.2.3 |
References
- https://security.paloaltonetworks.com/CVE-2024-3393Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3393US Government Resource
Timeline
- Published
- Dec 27, 2024
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Dec 30, 2024
- NVD status
- Analyzed