CVE-2024-3384CWE-1286

PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets

High · published April 10, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00885 · 58.8th percentile
Weakness
CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published
2024-04-10T17:06Z
EPSS history
Timeline
  • 10 APR 17:06Z
    PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
    cvelistv5