CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9463

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.943

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 7.5

Proposed Action

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

Ransomware Campaign

Unknown

References

https://security.paloaltonetworks.com/PAN-SA-2024-0010

Products affected by CVE-2024-9463

Paloaltonetworks » Expedition » Version: 1.2.0

cpe:2.3:a:paloaltonetworks:expedition:1.2.0
Paloaltonetworks » Expedition » Version: 1.2.10

cpe:2.3:a:paloaltonetworks:expedition:1.2.10
Paloaltonetworks » Expedition » Version: 1.2.11

cpe:2.3:a:paloaltonetworks:expedition:1.2.11
Paloaltonetworks » Expedition » Version: 1.2.12

cpe:2.3:a:paloaltonetworks:expedition:1.2.12
Paloaltonetworks » Expedition » Version: 1.2.13

cpe:2.3:a:paloaltonetworks:expedition:1.2.13
Paloaltonetworks » Expedition » Version: 1.2.14

cpe:2.3:a:paloaltonetworks:expedition:1.2.14
Paloaltonetworks » Expedition » Version: 1.2.15

cpe:2.3:a:paloaltonetworks:expedition:1.2.15
Paloaltonetworks » Expedition » Version: 1.2.16.1

cpe:2.3:a:paloaltonetworks:expedition:1.2.16.1
Paloaltonetworks » Expedition » Version: 1.2.17

cpe:2.3:a:paloaltonetworks:expedition:1.2.17
Paloaltonetworks » Expedition » Version: 1.2.18.1

cpe:2.3:a:paloaltonetworks:expedition:1.2.18.1
Paloaltonetworks » Expedition » Version: 1.2.19

cpe:2.3:a:paloaltonetworks:expedition:1.2.19
Paloaltonetworks » Expedition » Version: 1.2.2

cpe:2.3:a:paloaltonetworks:expedition:1.2.2
Paloaltonetworks » Expedition » Version: 1.2.20

cpe:2.3:a:paloaltonetworks:expedition:1.2.20
Paloaltonetworks » Expedition » Version: 1.2.21

cpe:2.3:a:paloaltonetworks:expedition:1.2.21
Paloaltonetworks » Expedition » Version: 1.2.22

cpe:2.3:a:paloaltonetworks:expedition:1.2.22
Paloaltonetworks » Expedition » Version: 1.2.23

cpe:2.3:a:paloaltonetworks:expedition:1.2.23
Paloaltonetworks » Expedition » Version: 1.2.24

cpe:2.3:a:paloaltonetworks:expedition:1.2.24
Paloaltonetworks » Expedition » Version: 1.2.25

cpe:2.3:a:paloaltonetworks:expedition:1.2.25
Paloaltonetworks » Expedition » Version: 1.2.26

cpe:2.3:a:paloaltonetworks:expedition:1.2.26
Paloaltonetworks » Expedition » Version: 1.2.28

cpe:2.3:a:paloaltonetworks:expedition:1.2.28
Paloaltonetworks » Expedition » Version: 1.2.29

cpe:2.3:a:paloaltonetworks:expedition:1.2.29
Paloaltonetworks » Expedition » Version: 1.2.3

cpe:2.3:a:paloaltonetworks:expedition:1.2.3
Paloaltonetworks » Expedition » Version: 1.2.30

cpe:2.3:a:paloaltonetworks:expedition:1.2.30
Paloaltonetworks » Expedition » Version: 1.2.31

cpe:2.3:a:paloaltonetworks:expedition:1.2.31
Paloaltonetworks » Expedition » Version: 1.2.32

cpe:2.3:a:paloaltonetworks:expedition:1.2.32
Paloaltonetworks » Expedition » Version: 1.2.33

cpe:2.3:a:paloaltonetworks:expedition:1.2.33
Paloaltonetworks » Expedition » Version: 1.2.34

cpe:2.3:a:paloaltonetworks:expedition:1.2.34
Paloaltonetworks » Expedition » Version: 1.2.35

cpe:2.3:a:paloaltonetworks:expedition:1.2.35
Paloaltonetworks » Expedition » Version: 1.2.36

cpe:2.3:a:paloaltonetworks:expedition:1.2.36
Paloaltonetworks » Expedition » Version: 1.2.37

cpe:2.3:a:paloaltonetworks:expedition:1.2.37
Paloaltonetworks » Expedition » Version: 1.2.38

cpe:2.3:a:paloaltonetworks:expedition:1.2.38
Paloaltonetworks » Expedition » Version: 1.2.39

cpe:2.3:a:paloaltonetworks:expedition:1.2.39
Paloaltonetworks » Expedition » Version: 1.2.4.2

cpe:2.3:a:paloaltonetworks:expedition:1.2.4.2
Paloaltonetworks » Expedition » Version: 1.2.40

cpe:2.3:a:paloaltonetworks:expedition:1.2.40
Paloaltonetworks » Expedition » Version: 1.2.41

cpe:2.3:a:paloaltonetworks:expedition:1.2.41
Paloaltonetworks » Expedition » Version: 1.2.42

cpe:2.3:a:paloaltonetworks:expedition:1.2.42
Paloaltonetworks » Expedition » Version: 1.2.43

cpe:2.3:a:paloaltonetworks:expedition:1.2.43
Paloaltonetworks » Expedition » Version: 1.2.44

cpe:2.3:a:paloaltonetworks:expedition:1.2.44
Paloaltonetworks » Expedition » Version: 1.2.45

cpe:2.3:a:paloaltonetworks:expedition:1.2.45
Paloaltonetworks » Expedition » Version: 1.2.46

cpe:2.3:a:paloaltonetworks:expedition:1.2.46
Paloaltonetworks » Expedition » Version: 1.2.47

cpe:2.3:a:paloaltonetworks:expedition:1.2.47
Paloaltonetworks » Expedition » Version: 1.2.48

cpe:2.3:a:paloaltonetworks:expedition:1.2.48
Paloaltonetworks » Expedition » Version: 1.2.49

cpe:2.3:a:paloaltonetworks:expedition:1.2.49
Paloaltonetworks » Expedition » Version: 1.2.50

cpe:2.3:a:paloaltonetworks:expedition:1.2.50
Paloaltonetworks » Expedition » Version: 1.2.51

cpe:2.3:a:paloaltonetworks:expedition:1.2.51
Paloaltonetworks » Expedition » Version: 1.2.52

cpe:2.3:a:paloaltonetworks:expedition:1.2.52
Paloaltonetworks » Expedition » Version: 1.2.53

cpe:2.3:a:paloaltonetworks:expedition:1.2.53
Paloaltonetworks » Expedition » Version: 1.2.54

cpe:2.3:a:paloaltonetworks:expedition:1.2.54
Paloaltonetworks » Expedition » Version: 1.2.55

cpe:2.3:a:paloaltonetworks:expedition:1.2.55
Paloaltonetworks » Expedition » Version: 1.2.56

cpe:2.3:a:paloaltonetworks:expedition:1.2.56
Paloaltonetworks » Expedition » Version: 1.2.57

cpe:2.3:a:paloaltonetworks:expedition:1.2.57
Paloaltonetworks » Expedition » Version: 1.2.58

cpe:2.3:a:paloaltonetworks:expedition:1.2.58
Paloaltonetworks » Expedition » Version: 1.2.59

cpe:2.3:a:paloaltonetworks:expedition:1.2.59
Paloaltonetworks » Expedition » Version: 1.2.6

cpe:2.3:a:paloaltonetworks:expedition:1.2.6
Paloaltonetworks » Expedition » Version: 1.2.60

cpe:2.3:a:paloaltonetworks:expedition:1.2.60
Paloaltonetworks » Expedition » Version: 1.2.61

cpe:2.3:a:paloaltonetworks:expedition:1.2.61
Paloaltonetworks » Expedition » Version: 1.2.62

cpe:2.3:a:paloaltonetworks:expedition:1.2.62
Paloaltonetworks » Expedition » Version: 1.2.63

cpe:2.3:a:paloaltonetworks:expedition:1.2.63
Paloaltonetworks » Expedition » Version: 1.2.64

cpe:2.3:a:paloaltonetworks:expedition:1.2.64
Paloaltonetworks » Expedition » Version: 1.2.65

cpe:2.3:a:paloaltonetworks:expedition:1.2.65
Paloaltonetworks » Expedition » Version: 1.2.66

cpe:2.3:a:paloaltonetworks:expedition:1.2.66
Paloaltonetworks » Expedition » Version: 1.2.67

cpe:2.3:a:paloaltonetworks:expedition:1.2.67
Paloaltonetworks » Expedition » Version: 1.2.68

cpe:2.3:a:paloaltonetworks:expedition:1.2.68
Paloaltonetworks » Expedition » Version: 1.2.69

cpe:2.3:a:paloaltonetworks:expedition:1.2.69
Paloaltonetworks » Expedition » Version: 1.2.7

cpe:2.3:a:paloaltonetworks:expedition:1.2.7
Paloaltonetworks » Expedition » Version: 1.2.70

cpe:2.3:a:paloaltonetworks:expedition:1.2.70
Paloaltonetworks » Expedition » Version: 1.2.71

cpe:2.3:a:paloaltonetworks:expedition:1.2.71
Paloaltonetworks » Expedition » Version: 1.2.72

cpe:2.3:a:paloaltonetworks:expedition:1.2.72
Paloaltonetworks » Expedition » Version: 1.2.73

cpe:2.3:a:paloaltonetworks:expedition:1.2.73
Paloaltonetworks » Expedition » Version: 1.2.74

cpe:2.3:a:paloaltonetworks:expedition:1.2.74
Paloaltonetworks » Expedition » Version: 1.2.75

cpe:2.3:a:paloaltonetworks:expedition:1.2.75
Paloaltonetworks » Expedition » Version: 1.2.76

cpe:2.3:a:paloaltonetworks:expedition:1.2.76
Paloaltonetworks » Expedition » Version: 1.2.77

cpe:2.3:a:paloaltonetworks:expedition:1.2.77
Paloaltonetworks » Expedition » Version: 1.2.78

cpe:2.3:a:paloaltonetworks:expedition:1.2.78
Paloaltonetworks » Expedition » Version: 1.2.79

cpe:2.3:a:paloaltonetworks:expedition:1.2.79
Paloaltonetworks » Expedition » Version: 1.2.8

cpe:2.3:a:paloaltonetworks:expedition:1.2.8
Paloaltonetworks » Expedition » Version: 1.2.80

cpe:2.3:a:paloaltonetworks:expedition:1.2.80
Paloaltonetworks » Expedition » Version: 1.2.81

cpe:2.3:a:paloaltonetworks:expedition:1.2.81
Paloaltonetworks » Expedition » Version: 1.2.82

cpe:2.3:a:paloaltonetworks:expedition:1.2.82
Paloaltonetworks » Expedition » Version: 1.2.83

cpe:2.3:a:paloaltonetworks:expedition:1.2.83
Paloaltonetworks » Expedition » Version: 1.2.84

cpe:2.3:a:paloaltonetworks:expedition:1.2.84
Paloaltonetworks » Expedition » Version: 1.2.85

cpe:2.3:a:paloaltonetworks:expedition:1.2.85
Paloaltonetworks » Expedition » Version: 1.2.86

cpe:2.3:a:paloaltonetworks:expedition:1.2.86
Paloaltonetworks » Expedition » Version: 1.2.87

cpe:2.3:a:paloaltonetworks:expedition:1.2.87
Paloaltonetworks » Expedition » Version: 1.2.88

cpe:2.3:a:paloaltonetworks:expedition:1.2.88
Paloaltonetworks » Expedition » Version: 1.2.89

cpe:2.3:a:paloaltonetworks:expedition:1.2.89
Paloaltonetworks » Expedition » Version: 1.2.9

cpe:2.3:a:paloaltonetworks:expedition:1.2.9
Paloaltonetworks » Expedition » Version: 1.2.90.1

cpe:2.3:a:paloaltonetworks:expedition:1.2.90.1
Paloaltonetworks » Expedition » Version: 1.2.91

cpe:2.3:a:paloaltonetworks:expedition:1.2.91
Paloaltonetworks » Expedition » Version: 1.2.92

cpe:2.3:a:paloaltonetworks:expedition:1.2.92
Paloaltonetworks » Expedition » Version: 1.2.93

cpe:2.3:a:paloaltonetworks:expedition:1.2.93
Paloaltonetworks » Expedition » Version: 1.2.94

cpe:2.3:a:paloaltonetworks:expedition:1.2.94
Paloaltonetworks » Expedition » Version: 1.2.95

cpe:2.3:a:paloaltonetworks:expedition:1.2.95

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-9463

Products

Pricing

Contact Us