CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

KNOWN EXPLOITED VULNERABILITY

CISA KEV 处置信息

已确认在野利用

加入 KEV: 2024/12/30
整改期限: 2025/01/20已逾期 638 天
CISA 厂商: Palo Alto Networks
CISA 产品: PAN-OS

要求采取的措施

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA 说明

https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

漏洞描述

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

影响产品

暂无结构化产品信息。

修复建议