CVE-2024-3393

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 6/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

CISA Known Exploited Vulnerability

Vendor / Product Palo Alto Networks — PAN-OS
Date Added 2024-12-30
Remediation Due 2025-01-20
https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393

Bug Bounty Relevance

6 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

29.12%
Raw Score 0.291200
Percentile 98.2%
Date 2026-10-28

Intelligence Sources

kev ref →