Intel

CVE-2024-3385

Ein Paketverarbeitungsmechanismus in der PAN-OS-Software von Palo Alto Networks ermöglicht es einem entfernten Angreifer, hardwarebasiert…

highEPSS 0.9%

Description

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.

This affects the following hardware firewall models:

  • PA-5400 Series firewalls
  • PA-7000 Series firewalls
Source: cvelistv5ENISA EUVD

Metrics

XIEM Effective CVSS
7.5
Source: nvd-v3
EPSS percentile
58.5 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
high
Priority score
69.94
Exploit maturity
no public PoC known
CVSS v3
7.5
EPSS score
0.9 %
Low — model estimates < 1% exploitation likelihood.
Published
2024-04-10 17:06 UTC
CWE
CWE-20, CWE-476

Weakness classes (CWE)

  • CWE-20Class

    Improper Input Validation

    The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

    cwe.mitre.org →

  • CWE-476Base

    NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

    cwe.mitre.org →

References & sources