VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 14, 2024· Updated Jun 17, 2026

CVE-2024-2551

CVE-2024-2551

Description

A null pointer dereference vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to stop a core system service on the firewall by sending a crafted packet through the data plane that causes a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the firewall entering maintenance mode.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Paloaltonetworks/Pan OS7 versions
    cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: >=10.1.0,<10.1.14
    • cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h2:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h3:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:h4:*:*:*:*:*:*
    • cpe:2.3:o:paloaltonetworks:pan-os:11.0.4:h5:*:*:*:*:*:*range: 11.0.0
    • (no CPE)
  • Paloaltonetworks/Cloud Ngfwcpe-rescue
    Range: All
  • Paloaltonetworks/Prisma Access Agentcpe-rescue
    Range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.