CVE-2024-9463 - Palo Alto Networks Expedition OS Command Injection Vulnerability
项目：Palo Alto Networks
产品：Expedition
添加日期：2024-11-14到期日：2024-12-05最后更新：June 21, 2025
漏洞名称
Palo Alto Networks Expedition OS Command Injection Vulnerability
描述
Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
已知用于勒索软件活动吗？
Unknown
采集行动
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
其他说明
https://security.paloaltonetworks.com/PAN-SA-2024-0010
https://nvd.nist.gov/vuln/detail/CVE-2024-9463
相关新闻文章
PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs and Patch ReleasedNovember 16, 2024
PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs ReleasedNovember 16, 2024
CISA Flags Two Actively Exploited Palo Alto Flaws; New RCE Attack ConfirmedNovember 15, 2024
CISA Flags Critical Palo Alto Network Flaws Actively Exploited in the WildNovember 15, 2024