Executive summary
Public evidence documents CVE-2024-3393. This report does not assess any organization.
Technical analysis
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
Evidence and sources
Public evidence for CVE-2024-3393 with preserved provenance.
CVE-2024-3393 Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.
IOCs
No public IOC is available.
CVEs and affected products
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
ATT&CK mapping
No ATT&CK mapping is available.
Detection content
Sigma rules, YARA rules, Splunk SPL, and KQL detection logic.
Threat hunting
Hypothesis-driven hunt procedures and telemetry checklist.
Remediation
Containment actions, patching notes, and credential steps.
Historical relationships
No published historical relationship is available.
Timeline and change history
Confidence and caveats
1.0
⚠️ Public CTI only; no organizational exposure is asserted.
⚠️ CVSS and EPSS metadata were not present in the retrieved evidence payload.