CVE-2024-9464CWE-78

Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure

Critical · published October 9, 2024

Patch now

High probability of exploitation

CVSS calls it critical at 9.3. It sits in the 99.7th percentile for exploit probability.

CVSS v4.0
9.3
EPSS
83%
Percentile
99.7
In the wild
Unconfirmed
What it is

An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
EPSS
0.82612 · 99.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2024-10-09T17:03Z
EPSS history
Timeline
  • 09 OCT 17:03Z
    Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure
    cvelistv5