9.9Kritisch
KEV
CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
Bekannt ausgenutzt — Palo Alto Networks Expedition OS Command Injection Vulnerability
CISA hat am 14.11.2024 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 05.12.2024.
Erforderliche Maßnahme: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463
Beschreibung
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Schwachstellentyp (CWE):
CWE-78
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Palo Alto Networks | Expedition | 1.2.0 – < 1.2.96 | |
| paloaltonetworks | expedition | 1.2.0 |
Referenzen und Patches
- https://security.paloaltonetworks.com/PAN-SA-2024-0010 vendor-advisoryMitigationVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*≥ 1.2.0 < 1.2.96