CVE-2024-9463

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463

Remediation deadline: December 5, 2024

Description

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Timeline

Published:November 14th, 2024 12:00 AM

Last modified:November 14th, 2024 12:00 AM

Added to KEV:November 14th, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Palo Alto Networks

Products

Expedition

Weaknesses (CWE)

CWE-78

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute