Log in Start free

Vulnerability · Published Apr 10, 2024 · Assigned by palo_alto

CVE-2024-3385PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled

High 7.5

In plain English

A high-severity improper input validation in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the following hardware firewall models: - PA-5400 Series firewalls - PA-7000 Series firewalls

Affected products (as reported)

VendorProductVersions
Palo Alto Networks PAN-OS 9.0.0 – before 9.0.17-h49.1.0 – before 9.1.1710.1.0 – before 10.1.1210.2.0 – before 10.2.811.0.0 – before 11.0.3
Palo Alto Networks Cloud NGFW see references
Palo Alto Networks Prisma Access see references

Weakness: CWE-20, CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References