CVE-2024-9463
Palo Alto Networks Expedition OS Command Injection Vulnerability
CVSS
—
Sem CVSS
EPSS
98.5%
p100
KEV
SIM
14 de nov. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Palo Alto Networks / Expedition
Vulnerabilidade
Palo Alto Networks Expedition OS Command Injection Vulnerability
Adicionado ao KEV
14 de nov. de 2024
Corrigir até
5 de dez. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463