5.3
Moyenne
CVE-2024-3387 A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a…
Description
A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traffic between the Panorama management server and the firewalls it manages. With sufficient computing resources, the attacker could break encrypted communication and expose sensitive information that is shared between the management server and the firewalls.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PAN-OS 11.1 | premières → < 11.1.0 | 11.1.0 |
| PAN-OS 11.0 | 11.0.0 → < 11.0.4 | 11.0.4 |
| PAN-OS 10.2 | 10.2.0 → < 10.2.8 | 10.2.7-h3 |
| PAN-OS 10.1 | 10.1.0 → < 10.1.12 | 10.1.12 |
| PAN-OS 9.1 | premières → < 9.1.0 | 9.1.0 |
| PAN-OS 9.0 | premières → < 9.0.0 | 9.0.0 |
| Cloud NGFW | Versions non publiées | |
| Prisma Access | Versions non publiées | |
| pan-os | 11.0.0 | Pas de correctif indiqué |
Autres CVE de PAN-OS
Les 197 CVE de PAN-OS →
CVE-2026-0316
A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…
1.1
Faible
CVE-2026-0317
A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only…
1.2
Faible
CVE-2026-0318
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software…
4.6
Moyenne
CVE-2026-0319
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables…
4.9
Moyenne