H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-9463

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Vulnerability
TypeVulnerability
External ID—
First seen2024-11-14
Last seen2024-11-14

Confidence

—

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Labels

exploitedkev

CISA KEV context

Vendor / productPalo Alto Networks Expedition
Added2024-11-14
Due date2024-12-05
6 recorded

Relationships

mitigates
from Remediate CVE-2024-9463
Mitigation
related-to
to Argument Injection
Technique
related-to
to Command Delimiters
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to OS Command Injection
Technique
2 external

References

nvd
CVE-2024-9463
open
cwe
CWE-78
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance