CVE-2024-9464

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

CVSS v4.0

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

82.61% chance of exploitation in the next 30 days, 100th percentile

Published

2024-10-09

Updated

2024-10-18

Proof-of-concept exploits (3)

• https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromis…
• horizon3ai/CVE-2024-946445★ · 2024-10-09
• p33d/Palo-Alto-Expedition-Remote-Code0★ · 2024-11-15

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_r…

References

• CVE Record
• NVD entry

Related

• CVE-2023-25581
• CVE-2024-23113
• CVE-2024-43363
• CVE-2024-43917
• CVE-2024-45519
• CVE-2024-5910