CVE-2024-3393: PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
8.7
CVSS
Description
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Known Exploited
🚨 Marked as known exploited on December 27th, 2024 (4 months ago).
Classification
CVE ID: CVE-2024-3393
CVSS Base Severity: HIGH
CVSS Base Score: 8.7
CVSS Vector:
Affected Products
Vendor: Palo Alto Networks
Product: Cloud NGFW
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.78% (probability of being exploited)
EPSS Percentile: 81.41% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)