Multiple vulnerabilities in Palo Alto Networks PAN‑OS allow an unauthenticated attacker with network access to cause a denial of service by sending specially crafted packets to a dataplane interface. Repeated exploitation can push the firewall into maintenance mode, rendering it unavailable to legitimate traffic and potentially disrupting critical network services. The CVSS score of 4.6 indicates moderate severity, yet the effect on firewall availability is highly disruptive for continuous‑operation environments.

The vulnerabilities affect PAN‑OS versions from 10.2.x through 12.1.x and corresponding releases of Cloud NGFW and Prisma Access. Panorama is explicitly not affected. The vendor’s solution guide lists specific fix versions for each product line, such as upgrading to PAN‑OS 12.1.7‑h2, 12.1.8, 11.2.13, 11.1.16, or the latest Prisma Access release.

The CVSS score of 4.6 classifies this DoS as moderate severity. The EPSS score below 1 % indicates a very low likelihood of exploitation, but the vulnerability can be triggered from any device with network reach to a dataplane interface, implying a simple network‑level attack. No known exploits are listed in the CISA KEV catalog, so the risk profile relies largely on a potential internal or opportunistic attacker. Organizations should prioritize applying the vendor‑recommended patch to eliminate the DoS risk.