Denial-of-Service Vulnerabilities Disrupting Network Perimeter and Wi‑Fi Infrastructure

A DoS vulnerability in Palo Alto Networks PAN-OS tracked as CVE-2024-3393 was reported as actively exploited in the wild, allowing unauthenticated remote attackers to send specially crafted DNS packets that can force affected firewalls to reboot and, with repeated triggering, potentially enter maintenance mode, effectively disabling perimeter enforcement. Reported impact is tied to the data plane when DNS Security is enabled and DNS Security logging is active, and it may affect multiple form factors (including PA-Series, VM-Series, CN-Series, and Prisma Access) where the DNS Security license is applied; advisories urge rapid patching/mitigation due to the risk of losing network security controls.

Separately, researchers disclosed a Broadcom chipset software flaw affecting at least the ASUS RT-BE86U that enables an unauthenticated, in-range attacker on 5 GHz Wi‑Fi to send a single malformed frame that immediately disconnects clients, requiring a manual router reset; the issue was found via fuzzing, fixed by Broadcom, and addressed by ASUS in updated firmware (reported fixed in 3.0.0.6.102_37841, affecting 3.0.0.6.102_37612 and older). A Palo Alto Networks advisory on a Chromium monthly vulnerability update lists multiple Chromium CVEs incorporated into Palo Alto products, but it is not directly related to the PAN-OS DNS DoS exploitation or the Broadcom/ASUS Wi‑Fi DoS issue.