Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jan 20, 2025

CVE-2024-3393

High
EPSS 77.2%CISA KEV

Description

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

EPSS — Exploit Probability

77.2%

Higher than 99.0% of all CVEs

Required Action

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
77.2%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Dec 30, 2024

Added to KEV

Dec 30, 2024

Remediation Due

Jan 20, 2025

Affected Product

Palo Alto Networks

PAN-OS

View all Palo Alto Networks CVEs