coldbraid

CVE-2024-3393 Palo Alto Networks PAN-OS

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

CVSS
not scored

CWE-754

On CISA’s exploited list

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Added
2024-12-30
Federal patch deadline
2025-01-20
Ransomware use
not known