9.9
Critique
Exploitée
CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-78
Description
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Expedition 1.2 | 1.2.0 → < 1.2.96 | 1.2.96 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Expedition
Les 12 CVE de Expedition →
CVE-2025-0107
Expedition: OS Command Injection Vulnerability
7.7
Élevée
CVE-2025-0106
A wildcard expansion vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to enumerate…
6.9
Moyenne
CVE-2025-0105
An arbitrary file deletion vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to…
6.9
Moyenne
CVE-2025-0104
A reflected cross-site scripting (XSS) vulnerability in Palo Alto Networks Expedition enables attackers to execute…
7.0
Élevée