{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T08:21:46.481","vulnerabilities":[{"cve":{"id":"CVE-2024-3386","sourceIdentifier":"psirt@paloaltonetworks.com","published":"2024-04-10T17:15:57.593","lastModified":"2026-06-17T07:44:10.783","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption."},{"lang":"es","value":"Una vulnerabilidad de comparación de cadenas incorrecta en el software PAN-OS de Palo Alto Networks impide que las exclusiones de descifrado predefinidas funcionen como está previsto. Esto puede provocar que el tráfico destinado a dominios que no están especificados en las exclusiones de descifrado predefinidas se excluya involuntariamente del descifrado."}],"affected":[{"source":"psirt@paloaltonetworks.com","affectedData":[{"vendor":"Palo Alto Networks","product":"PAN-OS","defaultStatus":"unaffected","versions":[{"version":"9.0.0","lessThan":"9.0.17-h2","versionType":"custom","status":"affected","changes":[{"at":"9.0.17-h2","status":"unaffected"}]},{"version":"9.1.0","lessThan":"9.1.17","versionType":"custom","status":"affected","changes":[{"at":"9.1.17","status":"unaffected"}]},{"version":"10.0.0","lessThan":"10.0.13","versionType":"custom","status":"affected","changes":[{"at":"10.0.13","status":"unaffected"}]},{"version":"10.1.0","lessThan":"10.1.9-h3","versionType":"custom","status":"affected","changes":[{"at":"10.1.9-h3","status":"unaffected"}]},{"version":"10.1.0","lessThan":"10.1.10","versionType":"custom","status":"affected","changes":[{"at":"10.1.10","status":"unaffected"}]},{"version":"10.2.0","lessThan":"10.2.4-h2","versionType":"custom","status":"affected","changes":[{"at":"10.2.4-h2","status":"unaffected"}]},{"version":"10.2.0","lessThan":"10.2.5","versionType":"custom","status":"affected","changes":[{"at":"10.2.5","status":"unaffected"}]},{"version":"11.0.0","lessThan":"11.0.1-h2","versionType":"custom","status":"affected","changes":[{"at":"11.0.1-h2","status":"unaffected"}]},{"version":"11.0.0","lessThan":"11.0.2","versionType":"custom","status":"affected","changes":[{"at":"11.0.2","status":"unaffected"}]},{"version":"11.1.0","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Cloud NGFW","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Prisma Access","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-04-10T19:11:36.523628Z","id":"CVE-2024-3386","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@paloaltonetworks.com","type":"Secondary","description":[{"lang":"en","value":"CWE-436"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-436"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"9.0.0","versionEndExcluding":"9.0.16","matchCriteriaId":"0E3757E3-17C0-4D42-A31A-78F40A774F41"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"9.1.0","versionEndExcluding":"9.1.17","matchCriteriaId":"9F9FFBA6-7008-422B-9CF1-E37CA62081EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.0","versionEndExcluding":"10.0.13","matchCriteriaId":"49DA2985-ADAA-4B26-B015-8B49D783B6D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"10.1.0","versionEndIncluding":"10.1.8","matchCriteriaId":"8B759077-C985-4005-8907-32E0C6CDFC10"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"10.2.0","versionEndExcluding":"10.2.4","matchCriteriaId":"D61F01F8-1598-4078-9D98-BFF5B62F3BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","versionStartIncluding":"11.0.0","versionEndExcluding":"11.0.1","matchCriteriaId":"77DF6A1B-2E69-4216-8740-3B1FF95E15A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:-:*:*:*:*:*:*","matchCriteriaId":"CDAE9753-EF8D-4B15-A73C-0EF56FE6C78C"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*","matchCriteriaId":"2A142EE1-E516-4582-9A7E-6E4C74FB3991"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74E22763-558D-4B53-9452-BBD0C07366D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h1:*:*:*:*:*:*","matchCriteriaId":"F5B9B574-5F3D-46B5-B9D8-2015997A63D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:*","matchCriteriaId":"135588B5-6771-46A3-98B0-39B4873FD6FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:*","matchCriteriaId":"10A69DAE-5AD5-4E1C-9DF0-C7B7BB023B66"}]}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2024-3386","source":"psirt@paloaltonetworks.com","tags":["Vendor Advisory"]},{"url":"https://security.paloaltonetworks.com/CVE-2024-3386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}