← CVE Intelligence

CVE-2024-3384

PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets PUBLISHED

Description (CNA)

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSaffected 8.1.0 before 8.1.24; affected 9.0.0 before 9.0.17; affected 9.1.0 before 9.1.15-h1; affected 10.0.0 before 10.0.12; unaffected 10.1.0; unaffected 10.2.0; unaffected 11.0.0; unaffected 11.1.0
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-1286

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.