high7.5Known exploited
CVE-2024-3393
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2024-12-30. Federal due date: 2025-01-20.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Impact
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | from 11.1.0 through 11.1.1 from 11.2.0 before 11.2.3 Versions 10.1.14, 10.2.8, 10.2.9, 10.2.10 |
| Paloaltonetworks | Prisma Access | All versions |