CVE-2024-3386

Published: Apr 10, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption.

Affected (12)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.0.0 to 10.0.13
Paloaltonetworks Pan Os	From 10.1.0 to 10.1.8
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.4
Paloaltonetworks Pan Os	From 11.0.0 to 11.0.1
Paloaltonetworks Pan Os	From 9.0.0 to 9.0.16
Paloaltonetworks Pan Os	From 9.1.0 to 9.1.17
Paloaltonetworks Pan Os	Version 10.1.9
Paloaltonetworks Pan Os	Version 10.1.9 h1
Paloaltonetworks Pan Os	Version 10.2.4
Paloaltonetworks Pan Os	Version 11.0.1
Paloaltonetworks Pan Os	Version 9.0.17
Paloaltonetworks Pan Os	Version 9.0.17 h1

Related CWEs

CWE-436

Interpretation Conflict

Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

References (2)

https://security.paloaltonetworks.com/CVE-2024-3386

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://security.paloaltonetworks.com/CVE-2024-3386

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.