The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures to neutralize special elements used in the operating system team. This allows attackers to enhance their privileges and execute arbitrary commands on the basic operating system.

🗓️ 17 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Vulnerability in Palo Alto Networks Expedition tool enables root privilege escalation via unneutralized OS elements.

Reporter	Title	Published	Views	Family All 20
zdt	Palo Alto Expedition 1.2.91 Remote Code Execution Exploit	14 Nov 202400:00	–	zdt
ATTACKERKB	CVE-2024-5910	10 Jul 202400:00	–	attackerkb
Circl	CVE-2024-9464	9 Oct 202416:49	–	circl
CNNVD	Palo Alto Networks Expedition 安全漏洞	9 Oct 202400:00	–	cnnvd
CVE	CVE-2024-9464	9 Oct 202417:03	–	cve
Cvelist	CVE-2024-9464 Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure	9 Oct 202417:03	–	cvelist
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Expedition	9 Oct 202416:36	–	githubexploit
Metasploit	Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)	9 Oct 202400:00	–	metasploit
NCSC	Vulnerabilities fixed in Palo Alto Expedition	10 Oct 202412:02	–	ncsc
NVD	CVE-2024-9464	9 Oct 202417:15	–	nvd

Vulners

Node

palo_alto_networks expeditionRange1.2.0–1.2.96

Source	Link
security-database	www.security-database.com/detail.php
cve	www.cve.org/ReportRequest/ReportRequestForNonCNAs
feedly	www.feedly.com/cve/CVE-2024-9464
security	www.security.paloaltonetworks.com/PAN-SA-2024-0010
horizon3	www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Oct 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 36.5

CVSS 26.8

EPSS0.81845

Palo Alto Networks Expedition privilege escalation root access arbitrary commands