Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2024-3384

PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

At a glance

Severity
HIGH 7.5
EPSS
EPSS 0.89 % · percentile 59 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
palo_alto
NVD status
Analyzed

Description

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hpalo_alto
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · psirt@paloaltonetworks.com (Secondary)
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Palo Alto Networks · PAN-OSaffected 8.1.0 < 8.1.24 ; affected 9.0.0 < 9.0.17 ; affected 9.1.0 < 9.1.15-h1 ; affected 10.0.0 < 10.0.12 ; unaffected 10.1.0 ; unaffected 10.2.0
Palo Alto Networks · Cloud NGFWunaffected All
Palo Alto Networks · Prisma Accessunaffected All

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD