Summary
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
- Vendor
- Palo Alto Networks
- Product
- PAN-OS
- Added to KEV
- Dec 30, 2024
- Remediation due
- Jan 20, 2025 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-754
- EPSS
- 30.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References