5.3
Medium
CVE-2024-3387 A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a…
Description
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traffic between the Panorama management server and the firewalls it manages. With sufficient computing resources, the attacker could break encrypted communication and expose sensitive information that is shared between the management server and the firewalls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PAN-OS 11.1 | earliest → < 11.1.0 | 11.1.0 |
| PAN-OS 11.0 | 11.0.0 → < 11.0.4 | 11.0.4 |
| PAN-OS 10.2 | 10.2.0 → < 10.2.8 | 10.2.7-h3 |
| PAN-OS 10.1 | 10.1.0 → < 10.1.12 | 10.1.12 |
| PAN-OS 9.1 | earliest → < 9.1.0 | 9.1.0 |
| PAN-OS 9.0 | earliest → < 9.0.0 | 9.0.0 |
| Cloud NGFW | Versions not published | |
| Prisma Access | Versions not published | |
| pan-os | 11.0.0 | No fix stated |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of PAN-OS
The 197 CVEs of PAN-OS →
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…
1.1
Low
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only…
1.2
Low
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software…
4.6
Medium
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables…
4.9
Medium