CVE-2024-3393
PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
En bref Sévérité HIGH 8.7 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2024-12-30 Exploitée selon l'ENISA depuis le 2024-12-30 EPSS EPSS 29.12 % · centile 98 (2026-10-27) État PUBLISHED Publiée 2024-12-27 Mise à jour 2025-10-21 Attribuée par palo_alto Statut NVD Analyzed Description A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Scores Version Score Vecteur Évalué par CVSS 4.0 HIGH 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:N/R:U/V:C/RE:M/U:Amber palo_alto CVSS 4.0 HIGH 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:N/R:U/V:C/RE:M/U:Amber palo_alto CVSS 4.0 HIGH 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber NVD · psirt@paloaltonetworks.com (Secondary) CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.1.0 ≤ 11.1.1cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* ≥ 11.2.0 < 11.2.3cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.1.14:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h13:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h15:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.8:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h11:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h14:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h16:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h18:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.9:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h10:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h5:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h7:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.10:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h4:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h6:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.11:h9:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:-:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h1:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h2:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.12:h3:*:*:*:*:*:*cpe:2.3:o:paloaltonetworks:pan-os:10.2.13:-:*:*:*:*:*:*+20 autres Produits affectés
Références
Sources
