CVE-2024-9463 - Palo Alto Networks Expedition OS Command Injection Vulnerability
CVE-2024-9463
Palo Alto Networks | Expedition
- Date Added:
- 2024-11-14
- Due Date:
- 2024-12-05
- Vulnerability Name
Palo Alto Networks Expedition OS Command Injection Vulnerability
- Description
Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
- Known To Be Used in Ransomware Campaigns?
Unknown
- Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- Additional Notes
- https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463
Free security scan for your website