Vulnerability · Published Apr 10, 2024 · Assigned by palo_alto
CVE-2024-3384PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
High 7.5
In plain English
A high-severity security flaw in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | PAN-OS | 8.1.0 – before 8.1.249.0.0 – before 9.0.179.1.0 – before 9.1.15-h110.0.0 – before 10.0.12 |
| Palo Alto Networks | Cloud NGFW | see references |
| Palo Alto Networks | Prisma Access | see references |
Weakness: CWE-1286 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H