CVE Watch—

CVE-2024-3393

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CVSS

—

Sem CVSS

EPSS

29.1%

p98

KEV

SIM

30 de dez. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

29.1%EPSS · 30 dias29.1%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Palo Alto Networks / PAN-OS

Vulnerabilidade

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Adicionado ao KEV

30 de dez. de 2024

Corrigir até

20 de jan. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-03227.2 ALT

77.8%

KEV—73Palo Alto Networks PAN-OS Code Injection Vulnerability22d CVE-2026-02579.1 CRÍ

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability10d CVE-2026-03009.8 CRÍ

98.7%

KEV—80Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability10d CVE-2025-01089.1 CRÍ

99.9%

KEV—80Palo Alto Networks PAN-OS Authentication Bypass Vulnerability43d CVE-2024-94747.2 ALT

99.8%

KEV—80Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability94d CVE-2024-00129.8 CRÍ

100.0%

KEV—80Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability94d