CVE Watch—

CVE-2024-3393

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CVSS

—

Sin CVSS

EPSS

26.6%

p98

KEV

SÍ

30 dic 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

26.6%EPSS · 30 días26.6%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Palo Alto Networks / PAN-OS

Vulnerabilidad

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Añadido a KEV

30 dic 2024

Remediar antes de

20 ene 2025

Uso conocido en ransomware

Descripción resumida

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2024-3400—

100.0%

KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—CVE-2024-0012—

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability—CVE-2025-0108—

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—CVE-2017-15944—

99.9%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability—CVE-2024-9474—

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability—CVE-2026-0257—

99.7%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability—