CVE-2024-9464
Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
CRITICAL 9.3EPSS 82.6%
An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
- Affected
- Palo Alto Networks · Expedition
- CVSS v4.0 PALOALTONETWORKS
- 9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber - CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 82.61% chance of exploitation in the next 30 days, 100th percentile
- Published
- 2024-10-09
- Updated
- 2024-10-18
Proof-of-concept exploits (3)
- https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromis…
- horizon3ai/CVE-2024-946445★ · 2024-10-09
- p33d/Palo-Alto-Expedition-Remote-Code0★ · 2024-11-15