{"id":"CVE-2024-3385","published":"2024-04-10T17:06:28Z","modified":"2026-05-13T20:17:23Z","title":"PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled","vendor":"Palo Alto Networks","product":"PAN-OS","tier":"tail","description":{"text":"A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.\n\nThis affects the following hardware firewall models:\n- PA-5400 Series firewalls\n- PA-7000 Series firewalls","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00901,"percentile":0.5957,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"},{"id":"CWE-476","name":"NULL Pointer Dereference"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2024-3385","tags":[]}],"priority":{"score":17.2,"factors":[{"name":"EPSS percentile","points":11.91},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"palo-alto-networks","affectedVersions":[{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":[">= 9.0.0, < 9.0.17-h4",">= 9.1.0, < 9.1.17",">= 10.1.0, < 10.1.12",">= 10.2.0, < 10.2.8",">= 11.0.0, < 11.0.3"]}],"euvd":{"id":"EUVD-2024-31974","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-palo-alto-networks-pan-os-cwe-20"}}