← Ana sayfa

CVE-2024-9463

Palo Alto Networks Expedition OS Command Injection Vulnerability

Severity: YüksekCVSS: -EPSS: -CISA KEVExploit Mevcut

Açıklama

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Etkilenen Ürün

Vendor: Palo Alto Networks · Product: Expedition

Etkilenen sürümler: -

KOBALT VMS Çözüm Önerisi

Bu zafiyet müşteriye ait asset, agent, connector ve attack surface verileriyle eşleşiyorsa önceliklendirilmiş aksiyon planına alınmalıdır.