Palo Alto Networks PAN-OS Software Vulnerability Allows Remote Reboot of Firewalls
CVE-2024-3384

7.5HIGH

Key Information:

Vendor: Palo Alto Networks
Status: Pan-os; Cloud Ngfw; Prisma Access
Vendor: CVE Published:; 10 April 2024

🔔 Create Palo Alto Networks Vulnerability Alert

What is CVE-2024-3384?

A vulnerability in PAN-OS software from Palo Alto Networks allows remote attackers to exploit Windows New Technology LAN Manager (NTLM) packets. When exploited, this vulnerability enables unauthorized rebooting of PAN-OS firewalls. Continuous attacks may lead to situations where the firewall is forced into maintenance mode, necessitating manual intervention for recovery. Organizations using affected versions are advised to review their security posture and implement necessary precautions to mitigate potential risks from this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PAN-OS 8.1.0 < 8.1.24

PAN-OS 9.0.0 < 9.0.17

PAN-OS 9.1.0 < 9.1.15-h1

References

https://security.paloaltonetworks.com/CVE-2024-3384

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 10, 2024
Vulnerability Reserved
Apr 5, 2024

Credit

Palo Alto Networks thanks rqu for discovering and reporting this issue.

JSON