CVE-2024-9464

critical · 9.3

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

9.3

CVSS

82.6%

EPSS (exploit prob.)

100th

EPSS percentile

2024-10-09

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:C/RE:H/U:Amber

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
paloaltonetworks	expedition	>= 1.2.0, < 1.2.96

Check a specific version with /api/v1/cve/match.

References

https://security.paloaltonetworks.com/PAN-SA-2024-0010
https://www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-9464