7.5
High
CVE-2024-3384 A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when…
Description
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PAN-OS 11.1 | earliest → < 11.1.0 | 11.1.0 |
| PAN-OS 11.0 | earliest → < 11.0.0 | 11.0.0 |
| PAN-OS 10.2 | earliest → < 10.2.0 | 10.2.0 |
| PAN-OS 10.1 | earliest → < 10.1.0 | 10.1.0 |
| PAN-OS 10.0 | 10.0.0 → < 10.0.12 | 10.0.12 |
| PAN-OS 9.1 | 9.1.0 → < 9.1.15-h1 | 9.1.15-h1 |
| PAN-OS 9.0 | 9.0.0 → < 9.0.17 | 9.0.17 |
| PAN-OS 8.1 | 8.1.0 → < 8.1.24 | 8.1.24 |
| Cloud NGFW | Versions not published |
Show the other branch Hide the other branch
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Access | Versions not published |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of PAN-OS
The 197 CVEs of PAN-OS →
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…
1.1
Low
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only…
1.2
Low
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software…
4.6
Medium
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables…
4.9
Medium