by Kastro
Paper/Archive/CVE-2024-9464

CVE-2024-9464

Palo Alto Networks Expedition — Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

EPSS 83%public exploitCVSS 9.3
critical.is priorityof 100
58
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 99.7.997 × 2019.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Affected

ProductAffectedFixed inSource
Expedition1.2.0 – < 1.2.961.2.96CNA
expedition1.2.0 – < 1.2.961.2.96CISA-ADP

Scores by source

palo_alto (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

advisorysecurity.paloaltonetworks.com/PAN-SA-2024-0010exploithorizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise