CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-10-09
Palo Alto Networks Expedition OS Command Injection Vulnerability (CVE-2024-9463) Security Advisory
[Affected Scope] Palo Alto Networks Expedition migration tool versions prior to 1.2.96
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands as root, leading to the exposure of PAN-OS firewall usernames, cleartext passwords, device configurations, and API keys
[Mitigation] Immediately upgrade Expedition to version 1.2.96 or later, and rotate all potentially exposed firewall credentials and API keys