Lucene search
+L

1963 matches found

CISA KEV Catalog
CISA KEV Catalog
β€’added 2024/12/30 12:0 a.m.β€’33 views

Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter...

8.7CVSS7.2AI score0.26636EPSS
In wildExploits0
BDU FSTEC
BDU FSTEC
β€’added 2024/12/28 12:0 a.m.β€’9 views

The vulnerability of the command-line interface (CLI) of the PAN-OS operating system, allowing a hacker to read arbitrary files

The vulnerability of the command-line interface CLI of the PAN-OS operating system is related to the lack of measures taken to neutralize substitution characters or characters that match each other. Exploiting this vulnerability can allow an attacker to read arbitrary files...

4.6CVSS5.6AI score0.00235EPSS
Exploits0References3Affected Software1
NVD
NVD
β€’added 2024/12/27 10:15 a.m.β€’63 views

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS0.26636EPSS
Exploits0References2
OSV
OSV
β€’added 2024/12/27 10:15 a.m.β€’6 views

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

7.5CVSS5.8AI score0.26636EPSS
Exploits0References2
Cvelist
Cvelist
β€’added 2024/12/27 9:44 a.m.β€’614 views

CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS0.26636EPSS
Exploits0References1
Vulnrichment
Vulnrichment
β€’added 2024/12/27 9:44 a.m.β€’57 views

CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS6.9AI score0.26636EPSS
Exploits0References1
CVE
CVE
β€’added 2024/12/27 9:44 a.m.β€’610 views

CVE-2024-3393

CVE-2024-3393 affects Palo Alto Networks PAN-OS DNS Security: a vulnerability in parsing/logging malicious DNS packets allows an unauthenticated attacker to reboot the firewall via a crafted packet, with repeated attempts forcing maintenance mode. Connected sources indicate active exploitation an...

8.7CVSS6.5AI score0.26636EPSS
In wildExploits0References2Affected Software1
The Hacker News
The Hacker News
β€’added 2024/12/27 7:34 a.m.β€’18 views

Palo Alto Releases Patch for PAN-OS DoS Flaw β€” Update Immediately

Palo Alto Networks has disclosed a high-severity vulnerability impacting PAN-OS software that could cause a denial-of-service DoS condition on susceptible devices. The flaw, tracked as CVE-2024-3393 CVSS score: 8.7, impacts PAN-OS versions 10.X and 11.X, as well as Prisma Access running PAN-OS...

7.1CVSS9.2AI score0.26636EPSS
Exploits0
Palo Alto Networks
Palo Alto Networks
β€’added 2024/12/27 2:30 a.m.β€’23 views

PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

7.1CVSS7.2AI score0.26636EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
β€’added 2024/12/27 12:0 a.m.β€’173 views

CVE-2024-3393

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall t...

8.7CVSS6.9AI score0.26636EPSS
In wildExploits0References2
Tenable Nessus
Tenable Nessus
β€’added 2024/12/27 12:0 a.m.β€’33 views

Palo Alto Networks PAN-OS 10.1.x < 10.1.15 / 10.2.x < 10.2.14 / 11.1.x < 11.1.5 / 11.2.x < 11.2.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.15 or 10.2.x prior to 10.2.14 or 11.1.x prior to 11.1.5 or 11.2.x prior to 11.2.3. It is, therefore, affected by a vulnerability. A Denial of Service vulnerability in the DNS Security feature of Palo Alto...

8.7CVSS8.1AI score0.26636EPSS
Exploits0References2
GithubExploit
GithubExploit
β€’added 2024/12/11 6:13 p.m.β€’465 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

πŸš€ CVE-2024-0012 & CVE-2024-9474 Palo Alto PAN-OS Exploit πŸ”...

9.8CVSS9.6AI score0.99698EPSS
Exploits18
GithubExploit
GithubExploit
β€’added 2024/11/30 4:6 p.m.β€’299 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

!Python 3.xhttps://img.shields.io/badge/python-3.x-yellow.sv...

9.8CVSS10AI score0.99698EPSS
Exploits15
Information Security Automation
Information Security Automation
β€’added 2024/11/29 11:0 p.m.β€’38 views

About Elevation of Privilege – PAN-OS (CVE-2024-9474) vulnerability

About Elevation of Privilege - PAN-OS CVE-2024-9474 vulnerability. An attacker with PAN-OS administrator access to the management web interface can perform actions on the Palo Alto device with root privileges. Linux commands can be injected via unvalidated input in script. The need for...

5.9CVSS9.7AI score0.99698EPSS
Exploits18
Information Security Automation
Information Security Automation
β€’added 2024/11/27 3:23 p.m.β€’30 views

About Authentication Bypass – PAN-OS (CVE-2024-0012) vulnerability

About Authentication Bypass - PAN-OS CVE-2024-0012 vulnerability. An unauthenticated attacker with network access to the Palo Alto device web management interface could gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other...

5.9CVSS7.2AI score0.99698EPSS
Exploits15
Tenable Nessus
Tenable Nessus
β€’added 2024/11/26 12:0 a.m.β€’3 views

Palo Alto PAN-OS GlobalProtect Authentication Bypass

Palo Alto PAN-OS versions 10.2.x 10.2.12 / 11.0.x 11.0.6 / 11.1.x 11.0.5 / 11.2.x 11.2.4 is affected by a vulnerability allowing an attacker to bypass authentication and make administrator requests via a specially forged request. No source data...

9.8CVSS7.3AI score0.99698EPSS
Exploits15References2
CNVD
CNVD
β€’added 2024/11/26 12:0 a.m.β€’7 views

Palo Alto Networks PAN-OS Operating System Command Injection Vulnerability (CNVD-2024-46250)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. Palo Alto Networks PAN-OS suffers from an operating system command injection vulnerability that stems from the presence of an elevation of privilege vulnerability that would allow a PAN-O...

7.2CVSS7.4AI score0.94766EPSS
Exploits14References1
GithubExploit
GithubExploit
β€’added 2024/11/22 2:11 p.m.β€’353 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

cve-2024-0012-poc CVE-2024-0012 is an authentication bypass v...

9.8CVSS7.3AI score0.99698EPSS
Exploits18
Wiz blog
Wiz blog
β€’added 2024/11/22 1:50 p.m.β€’21 views

Wiz observes exploitation in the wild of PAN-OS vulnerabilities

Detect and mitigate CVE-2024-0012 and CVE-2024-9474, PAN-OS vulnerabilities which Wiz Threat Research has observed being exploited in-the-wild. Organizations should patch urgently...

9.8CVSS7AI score0.99698EPSS
Exploits18
GithubExploit
GithubExploit
β€’added 2024/11/22 7:52 a.m.β€’96 views

Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os

For more PoC details, see: https://pc.fenchuan8.com//index?fo...

9.8CVSS7.5AI score0.99698EPSS
Exploits15
Rows per page
Query Builder