CVE-2024-3393
Last modified
CVE-2024-3393 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.. CISA has confirmed active exploitation in the wild. EPSS estimates a 26.64% chance of exploitation in the next 30 days.
Description
A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:M/U:Amber
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | >= 11.1.0, <= 11.1.1 |
| Paloaltonetworks | Pan-Os | >= 11.2.0, < 11.2.3 |
| Paloaltonetworks | Pan-Os | 10.1.14 |
| Paloaltonetworks | Pan-Os | 10.2.8 |
| Paloaltonetworks | Pan-Os | 10.2.9 |
| Paloaltonetworks | Pan-Os | 10.2.10 |
| Paloaltonetworks | Pan-Os | 10.2.11 |
| Paloaltonetworks | Pan-Os | 10.2.12 |
| Paloaltonetworks | Pan-Os | 10.2.13 |
| Paloaltonetworks | Pan-Os | 11.1.2 |
| Paloaltonetworks | Pan-Os | 11.1.3 |
| Paloaltonetworks | Pan-Os | 11.1.4 |
| Paloaltonetworks | Prisma Access | All versions |
References
- https://security.paloaltonetworks.com/CVE-2024-3393Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-3393US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-3393?
How severe is CVE-2024-3393?
How do I fix CVE-2024-3393?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-33924Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2024-33925Missing Authorization vulnerability in Adrian Mörchen Embed …4.3
- CVE-2024-33926Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2024-33927Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2024-33928Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2024-33929Missing Authorization vulnerability in wpWax Directorist.Thi…5.3
- CVE-2024-33930URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7
- CVE-2024-33931Missing Authorization vulnerability in ilGhera JW Player for…6.5
- CVE-2024-33932Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2024-33933Improper Neutralization of Input During Web Page Generation …5.4
- CVE-2024-33934Improper Neutralization of Input During Web Page Generation …6.5
- CVE-2024-33935Improper Neutralization of Input During Web Page Generation …6.5
Are you affected by CVE-2024-3393?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST