{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"9.0.17-h2","status":"unaffected"}],"lessThan":"9.0.17-h2","status":"affected","version":"9.0.0","versionType":"custom"},{"changes":[{"at":"9.1.17","status":"unaffected"}],"lessThan":"9.1.17","status":"affected","version":"9.1.0","versionType":"custom"},{"changes":[{"at":"10.0.13","status":"unaffected"}],"lessThan":"10.0.13","status":"affected","version":"10.0.0","versionType":"custom"},{"changes":[{"at":"10.1.9-h3","status":"unaffected"}],"lessThan":"10.1.9-h3","status":"affected","version":"10.1.0","versionType":"custom"},{"changes":[{"at":"10.1.10","status":"unaffected"}],"lessThan":"10.1.10","status":"affected","version":"10.1.0","versionType":"custom"},{"changes":[{"at":"10.2.4-h2","status":"unaffected"}],"lessThan":"10.2.4-h2","status":"affected","version":"10.2.0","versionType":"custom"},{"changes":[{"at":"10.2.5","status":"unaffected"}],"lessThan":"10.2.5","status":"affected","version":"10.2.0","versionType":"custom"},{"changes":[{"at":"11.0.1-h2","status":"unaffected"}],"lessThan":"11.0.1-h2","status":"affected","version":"11.0.0","versionType":"custom"},{"changes":[{"at":"11.0.2","status":"unaffected"}],"lessThan":"11.0.2","status":"affected","version":"11.0.0","versionType":"custom"},{"status":"unaffected","version":"11.1.0"}]},{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]}],"source":"psirt@paloaltonetworks.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"0E3757E3-17C0-4D42-A31A-78F40A774F41","versionEndExcluding":"9.0.16","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"9F9FFBA6-7008-422B-9CF1-E37CA62081EB","versionEndExcluding":"9.1.17","versionStartIncluding":"9.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"49DA2985-ADAA-4B26-B015-8B49D783B6D2","versionEndExcluding":"10.0.13","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"8B759077-C985-4005-8907-32E0C6CDFC10","versionEndIncluding":"10.1.8","versionStartIncluding":"10.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"D61F01F8-1598-4078-9D98-BFF5B62F3BA5","versionEndExcluding":"10.2.4","versionStartIncluding":"10.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"77DF6A1B-2E69-4216-8740-3B1FF95E15A0","versionEndExcluding":"11.0.1","versionStartIncluding":"11.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:-:*:*:*:*:*:*","matchCriteriaId":"CDAE9753-EF8D-4B15-A73C-0EF56FE6C78C","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*","matchCriteriaId":"2A142EE1-E516-4582-9A7E-6E4C74FB3991","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:*:*:*:*:*:*:*","matchCriteriaId":"74E22763-558D-4B53-9452-BBD0C07366D9","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.9:h1:*:*:*:*:*:*","matchCriteriaId":"F5B9B574-5F3D-46B5-B9D8-2015997A63D5","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.2.4:-:*:*:*:*:*:*","matchCriteriaId":"135588B5-6771-46A3-98B0-39B4873FD6FD","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:11.0.1:-:*:*:*:*:*:*","matchCriteriaId":"10A69DAE-5AD5-4E1C-9DF0-C7B7BB023B66","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An incorrect string comparison vulnerability in Palo Alto Networks PAN-OS software prevents Predefined Decryption Exclusions from functioning as intended. This can cause traffic destined for domains that are not specified in Predefined Decryption Exclusions to be unintentionally excluded from decryption."},{"lang":"es","value":"Una vulnerabilidad de comparación de cadenas incorrecta en el software PAN-OS de Palo Alto Networks impide que las exclusiones de descifrado predefinidas funcionen como está previsto. Esto puede provocar que el tráfico destinado a dominios que no están especificados en las exclusiones de descifrado predefinidas se excluya involuntariamente del descifrado."}],"id":"CVE-2024-3386","lastModified":"2026-06-17T07:44:10.783","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":1.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3386","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-04-10T19:11:36.523628Z","version":"2.0.3"}}]},"published":"2024-04-10T17:15:57.593","references":[{"source":"psirt@paloaltonetworks.com","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-3386"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-3386"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-436"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-436"}],"source":"nvd@nist.gov","type":"Primary"}]}