CyberCVE

CVE-2024-9464

Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

Severity
Critical 9.3
CVSS 4.0
Exploited
Not listed
EPSS
0.818
99.6th percentile
Discovered by
Third party
Published by the vendor
Published
Oct 9, 2024
Assigned by palo_alto

Description

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Weakness: CWE-78

Affected products

Vendor Product Category Matched by
Palo Alto Networks Expedition Network & Security Management cna-assigner
Vendor-reported affected versions (2)
  • Palo Alto Networks · Expedition
  • paloaltonetworks · expedition

Credit

Zach Hanley (@hacks_zach) of Horizon3.ai

Vendor remediation

The fixes for all listed issues are available in Expedition 1.2.96, and all later Expedition versions. All Expedition usernames, passwords, and API keys should be rotated after upgrading to the fixed version of Expedition. All firewall usernames, passwords, and API keys processed by Expedition should be rotated after updating.

References