Vulnerability · Published Oct 9, 2024 · Assigned by palo_alto
CVE-2024-9464Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
Critical 9.3
In plain English
A critical-severity OS command injection in Expedition from Palo Alto Networks. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 82.6% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | Expedition | 1.2.0 – before 1.2.96 |
Weakness: CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber