HIGHCVSS 7.5Actively exploited · CISA KEV since 2024-12-30Vulnerability

CVE-2024-3393

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Properties

Euvd product
PAN-OS
Vulnerability name
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
First seen
2025-10-21T22:55:33+00:00
Cvss score
7.5
Epss score
0.2912
Last seen
2026-10-19T12:00:27+00:00
Due date
2025-01-20
Euvd assigner
palo_alto
Retrieved at
2026-10-21T01:24:47+00:00
Exploited euvd since
2024-12-30T00:00:00+00:00
Src batch id
epss_history-20261020T103617Z-728ddd
Source url
https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
Date added
2024-12-30
Score
7.5
Euvd base score version
4.0
Fetched at
2026-10-20T10:36:20+00:00
Euvd vendor
Palo Alto Networks
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In Signal since
initial import (Sep 2026)
Euvd base score
8.7

Related Entities (63 · showing 23)

INVOLVES (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2024-3393 (CVSS 7.5) — Ninja Signal Threat Intelligence | Ninja Signal