{"id":"CVE-2024-3384","aliases":["EUVD-2024-31973","GHSA-hwc4-2rmw-hcvq"],"status":"published","title":"PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets","description":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00885,"percentile":0.59539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1286"],"published":"2024-04-10T17:06:21Z","modified":"2026-06-17T07:44:10Z","products":[{"vendor":"palo alto networks","product":"cloud ngfw"},{"vendor":"palo alto networks","product":"pan-os"},{"vendor":"palo alto networks","product":"prisma access"},{"vendor":"paloaltonetworks","product":"pan-os"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2024-3384","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3384"},{"url":"https://github.com/advisories/GHSA-hwc4-2rmw-hcvq"}],"sources":{"cve":[{"id":"CVE-2024-3384","title":"PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets","description":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.","status":"published","published":"2024-04-10T17:06:21.704Z","modified":"2024-08-01T20:12:06.484Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:34:10.961618Z"}],"euvd":[{"id":"EUVD-2024-31973","description":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.","status":"published","published":"2024-04-10T17:06:21Z","modified":"2024-08-01T20:12:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T03:50:39.0087Z"}],"ghsa":[{"id":"GHSA-hwc4-2rmw-hcvq","title":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS...","description":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.","status":"published","published":"2024-04-10T18:30:48Z","modified":"2024-04-10T18:30:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:57:05.919117Z"}],"nvd":[{"id":"CVE-2024-3384","description":"A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.","status":"published","published":"2024-04-10T17:15:57.217Z","modified":"2026-06-17T07:44:10.507Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-1286"],"updated_at":"2026-11-02T14:09:49.255123Z"}]}}