Hackers exploit DoS flaw to disable Palo Alto Networks firewalls

Share:

Palo Alto Networks is warning that hackers are exploiting the CVE-2024-3393 denial of service vulnerability to disable firewall protections by forcing it to reboot.

Leveraging the security issue repeatedly, however, causes the device to enter maintenance mode and manual intervention is required to restore it to normal operations.

“A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall,” reads the advisory.

DoS bug is actively exploited

Palo Alto Networks says that exploiting the vulnerability is possible by an unauthenticated attacker that sends a specially crafted, malicious packet to an affected device.

The issue only impacts devices where ‘DNS Security’ logging is enabled, while the product versions affected by CVE-2024-3393 are shown below.

Versions

The vendor confirmed that the flaw is actively exploited, noting that customers experienced outages when their firewall blocked malicious DNS packets from attackers leveraging the issue.

The company has addressed the flaw in PAN-OS 10.1.14-h8, PAN-OS 10.2.10-h12, PAN-OS 11.1.5, PAN-OS 11.2.3, and subsequent releases.

However, it’s noted that PAN-OS 11.0, which is impacted by CVE-2024-3393, will not receive a patch because that version has reached its end-of-life (EOL) date on November 17.

Palo Alto Networks has also published workarounds and steps to mitigate the problem for those who cannot immediately update:

For unmanaged NGFWs, NGFWs managed by Panorama, or Prisma Access Managed by Panorama:

  1. Navigate to: Objects → Security Profiles → Anti-spyware → DNS Policies → DNS Security for each Anti-spyware profile.
  2. Change the Log Severity to “none” for all configured DNS Security categories.
  3. Commit the changes and revert the Log Severity settings after applying the fixes.

For NGFWs managed by Strata Cloud Manager (SCM):

  • Option 1: Disable DNS Security logging directly on each NGFW using the steps above.
  • Option 2: Disable DNS Security logging across all NGFWs in the tenant by opening a support case.

For Prisma Access managed by Strata Cloud Manager (SCM):

  1. Open a support case to disable DNS Security logging across all NGFWs in your tenant.
  2. If needed, request to expedite the Prisma Access tenant upgrade in the support case.

Source

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
7:47 pm, May 17, 2025
weather icon 18°C
L: 17° | H: 18°
clear sky
Humidity: 54 %
Pressure: 1021 mb
Wind: 2 mph NNE
Wind Gust: 3 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 0%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 5:05 am
Sunset: 8:48 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
17° | 18°°C 0 mm 0% 4 mph 59 % 1021 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
11° | 16°°C 0 mm 0% 9 mph 82 % 1021 mb 0 mm/h
Mon May 19 10:00 pm
weather icon
11° | 19°°C 0.2 mm 20% 13 mph 78 % 1022 mb 0 mm/h
Tue May 20 10:00 pm
weather icon
9° | 21°°C 0.35 mm 35% 9 mph 81 % 1022 mb 0 mm/h
Wed May 21 10:00 pm
weather icon
11° | 20°°C 0.09 mm 9% 11 mph 79 % 1020 mb 0 mm/h
Today 10:00 pm
weather icon
14° | 17°°C 0 mm 0% 4 mph 59 % 1021 mb 0 mm/h
Tomorrow 1:00 am
weather icon
12° | 14°°C 0 mm 0% 4 mph 69 % 1021 mb 0 mm/h
Tomorrow 4:00 am
weather icon
11° | 11°°C 0 mm 0% 6 mph 81 % 1021 mb 0 mm/h
Tomorrow 7:00 am
weather icon
11° | 11°°C 0 mm 0% 8 mph 82 % 1021 mb 0 mm/h
Tomorrow 10:00 am
weather icon
11° | 11°°C 0 mm 0% 8 mph 69 % 1021 mb 0 mm/h
Tomorrow 1:00 pm
weather icon
14° | 14°°C 0 mm 0% 7 mph 53 % 1021 mb 0 mm/h
Tomorrow 4:00 pm
weather icon
16° | 16°°C 0 mm 0% 9 mph 49 % 1020 mb 0 mm/h
Tomorrow 7:00 pm
weather icon
14° | 14°°C 0 mm 0% 8 mph 56 % 1019 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,434.45
-0.74%
Ethereum(ETH)
€2,220.44
-4.09%
Tether(USDT)
€0.90
0.00%
XRP(XRP)
€2.10
-3.01%
Solana(SOL)
€149.25
-2.31%
USDC(USDC)
€0.90
0.00%
Dogecoin(DOGE)
€0.192913
-4.72%
Shiba Inu(SHIB)
€0.000013
-4.80%
Pepe(PEPE)
€0.000011
-8.27%
Peanut the Squirrel(PNUT)
€0.269938
-10.66%
Scroll to Top