9.9Kritik
KEV
CVE-2024-9463Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
Aktif olarak istismar ediliyor — Palo Alto Networks Expedition OS Command Injection Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 14.11.2024 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 05.12.2024.
Gerekli işlem: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463
Açıklama
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Zayıflık türü (CWE):
CWE-78
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Palo Alto Networks | Expedition | 1.2.0 – < 1.2.96 | |
| paloaltonetworks | expedition | 1.2.0 |
Kaynaklar ve yamalar
- https://security.paloaltonetworks.com/PAN-SA-2024-0010 vendor-advisoryMitigationVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9463 US Government Resource
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*≥ 1.2.0 < 1.2.96