Description
A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager (NTLM) packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 8.1.0 – < 8.1.24, 9.0.0 – < 9.0.17, 9.1.0 – < 9.1.15-h1, 10.0.0 – < 10.0.12 | 8.1.24 |
| Palo Alto Networks | Cloud NGFW | — | All |
| Palo Alto Networks | Prisma Access | — | All |
Advisories 1
- WID-SEC-2024-0853 PaloAlto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 10, 2024