9.9
Critical
Exploited
CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-78
Description
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Expedition 1.2 | 1.2.0 → < 1.2.96 | 1.2.96 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Expedition
The 12 CVEs of Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
High
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Medium
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Medium
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
High