CVE Watch—

CVE-2024-3393

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CVSS

—

Sin CVSS

EPSS

29.1%

p98

KEV

SÍ

30 dic 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

28.4%EPSS · 30 días29.1%

2026-09-182026-10-16

Ficha del catálogo KEV

Producto

Palo Alto Networks / PAN-OS

Vulnerabilidad

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Añadido a KEV

30 dic 2024

Remediar antes de

20 ene 2025

Uso conocido en ransomware

Descripción resumida

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-03227.2 ALT

68.1%

KEV—70Palo Alto Networks PAN-OS Code Injection Vulnerability2d CVE-2025-01089.1 CRÍ

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability23d CVE-2024-94747.2 ALT

99.9%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability74d CVE-2024-00129.8 CRÍ

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability74d CVE-2019-15798.1 ALT

98.8%

KEV—80Palo Alto Networks PAN-OS Remote Code Execution Vulnerability15d CVE-2024-3400—

100.0%

KEV—80Palo Alto Networks PAN-OS Command Injection Vulnerability—