Log in Start free

Vulnerability · Published Jan 11, 2025 · Assigned by palo_alto

CVE-2025-0107Expedition: OS Command Injection Vulnerability

High 7.7

In plain English

A high-severity OS command injection in Cloud NGFW from Palo Alto Networks. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 78.4% (higher than 99.6% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.

Severity (CVSS 4.0)7.7High
Exploit odds (30 days)78.4%top 0.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Nuclei

Official description

An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.

Affected products (as reported)

VendorProductVersions
Palo Alto Networks Cloud NGFW see references
Palo Alto Networks Expedition 1 – before 1.2.100
Palo Alto Networks Panorama see references
Palo Alto Networks PAN-OS see references
Palo Alto Networks Prisma Access see references

Weakness: CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Green

References