AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-3393

HIGH · CVSS 7.5 EPSS 26.64% CISA KEV · Actively Exploited

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-27 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Palo Alto, PAN-OS. It is listed in CISA's Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation in the wild. Its EPSS score suggests a 26.6% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2024-12-30

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE
CVE-2024-3393
Severity
HIGH
CVSS
7.5
EPSS
26.64%
Palo Alto PAN-OS

Original NVD Description

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

Related CVEs

Other vulnerabilities affecting the same vendor(s)