CVE-2024-9464 — Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

CVE-2024-9464

Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure PUBLISHED

Description (CNA)

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / Expedition	affected 1.2.0 before 1.2.96

CWE

CWE-78

References

https://security.paloaltonetworks.com/PAN-SA-2024-0010
https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.