CVE-2024-3393

Published: Dec 27, 2024Modified: Jun 17, 2026CISA KEV

8.7

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:AmberShow less

Source: psirt@paloaltonetworks.com (Secondary)

Description

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Affected (38)

Products: Paloaltonetworks: Pan Os, Prisma Access

Paloaltonetworks

2 products

Pan Os

Prisma Access

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 11.1.0 to 11.1.1
Paloaltonetworks Pan Os	From 11.2.0 to 11.2.3
Paloaltonetworks Pan Os	Version 10.1.14
Paloaltonetworks Pan Os	Version 10.1.14 h2
Paloaltonetworks Pan Os	Version 10.1.14 h4
Paloaltonetworks Pan Os	Version 10.1.14 h6
Paloaltonetworks Pan Os	Version 10.2.11
Paloaltonetworks Pan Os	Version 10.2.11 h1
Paloaltonetworks Pan Os	Version 10.2.11 h2
Paloaltonetworks Pan Os	Version 10.2.11 h3
Paloaltonetworks Pan Os	Version 10.2.11 h4
Paloaltonetworks Pan Os	Version 10.2.11 h6
Paloaltonetworks Pan Os	Version 10.2.11 h9
Paloaltonetworks Pan Os	Version 10.2.12
Paloaltonetworks Pan Os	Version 10.2.12 h1
Paloaltonetworks Pan Os	Version 10.2.12 h2
Paloaltonetworks Pan Os	Version 10.2.12 h3
Paloaltonetworks Pan Os	Version 10.2.13
Paloaltonetworks Pan Os	Version 10.2.13 h1
Paloaltonetworks Pan Os	Version 11.1.2
Paloaltonetworks Pan Os	Version 11.1.2 h12
Paloaltonetworks Pan Os	Version 11.1.2 h14
Paloaltonetworks Pan Os	Version 11.1.2 h15
Paloaltonetworks Pan Os	Version 11.1.2 h1
Paloaltonetworks Pan Os	Version 11.1.2 h3
Paloaltonetworks Pan Os	Version 11.1.2 h4
Paloaltonetworks Pan Os	Version 11.1.2 h9
Paloaltonetworks Pan Os	Version 11.1.3
Paloaltonetworks Pan Os	Version 11.1.3 h10
Paloaltonetworks Pan Os	Version 11.1.3 h11
Paloaltonetworks Pan Os	Version 11.1.3 h1
Paloaltonetworks Pan Os	Version 11.1.3 h2
Paloaltonetworks Pan Os	Version 11.1.3 h4
Paloaltonetworks Pan Os	Version 11.1.3 h6
Paloaltonetworks Pan Os	Version 11.1.4
Paloaltonetworks Pan Os	Version 11.1.4 h1
Paloaltonetworks Pan Os	Version 11.1.4 h4

Configuration B

1 vulnerable · 24 platform

Vulnerable Software	Affected Versions
Paloaltonetworks Prisma Access	All versions

Running on/with	Platform Versions
Paloaltonetworks Pan Os	From 10.2.11 to 11.2.3
Paloaltonetworks Pan Os	Version 10.2.10
Paloaltonetworks Pan Os	Version 10.2.10 h10
Paloaltonetworks Pan Os	Version 10.2.10 h2
Paloaltonetworks Pan Os	Version 10.2.10 h3
Paloaltonetworks Pan Os	Version 10.2.10 h4
Paloaltonetworks Pan Os	Version 10.2.10 h5
Paloaltonetworks Pan Os	Version 10.2.10 h7
Paloaltonetworks Pan Os	Version 10.2.10 h9
Paloaltonetworks Pan Os	Version 10.2.8
Paloaltonetworks Pan Os	Version 10.2.8 h10
Paloaltonetworks Pan Os	Version 10.2.8 h13
Paloaltonetworks Pan Os	Version 10.2.8 h15
Paloaltonetworks Pan Os	Version 10.2.8 h18
Paloaltonetworks Pan Os	Version 10.2.8 h19
Paloaltonetworks Pan Os	Version 10.2.8 h3
Paloaltonetworks Pan Os	Version 10.2.8 h4
Paloaltonetworks Pan Os	Version 10.2.9
Paloaltonetworks Pan Os	Version 10.2.9 h11
Paloaltonetworks Pan Os	Version 10.2.9 h14
Paloaltonetworks Pan Os	Version 10.2.9 h16
Paloaltonetworks Pan Os	Version 10.2.9 h18
Paloaltonetworks Pan Os	Version 10.2.9 h1
Paloaltonetworks Pan Os	Version 10.2.9 h9

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://security.paloaltonetworks.com/CVE-2024-3393

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3393

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.