by Kastro
Paper/Archive/CVE-2024-9463

CVE-2024-9463

Palo Alto Networks Expedition — Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure

KEV · due 5 DecEPSS 99%public exploitSSVC actCVSS 9.9
critical.is priorityof 100
100
CVSS 9.9 (CNA)9.9 / 10 × 3029.7In CISA KEV+3030.0EPSS percentile 99.9.999 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Affected

ProductAffectedFixed inSource
Expedition1.2.0 – < 1.2.961.2.96CNA

Scores by source

palo_alto (CNA)9.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorysecurity.paloaltonetworks.com/PAN-SA-2024-0010refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463kevcisa.gov/known-exploited-vulnerabilities-catalog