Exploit for OS Command Injection in Paloaltonetworks Expedition

🗓️ 09 Oct 2024 16:36:25Reported by horizon3aiType

Proof of concept to exploit CVE-2024-9464 on vulnerable devices. Chains admin reset of CVE-2024-5910 for arbitrary command executio

Reporter	Title	Published	Views	Family All 45
0day.today	Palo Alto Expedition 1.2.91 Remote Code Execution Exploit	14 Nov 202400:00	–	zdt
ATTACKERKB	CVE-2024-5910	10 Jul 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Palo Alto Networks Expedition configuration migration tool, related to the lack of authentication for a critical function, allows a perpetrator to obtain administrator credentials.	21 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures to neutralize special elements used in the operating system team. This allows attackers to enhance their privileges and execute arbitrary commands on the basic operating system.	17 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-5910	10 Jul 202421:49	–	circl
Circl	CVE-2024-9464	9 Oct 202416:49	–	circl
CISA KEV Catalog	Palo Alto Networks Expedition Missing Authentication Vulnerability	7 Nov 202400:00	–	cisa_kev
CISA	CISA Adds Four Known Exploited Vulnerabilities to Catalog	7 Nov 202412:00	–	cisa
CNNVD	Palo Alto Networks Expedition Security Breach	10 Jul 202400:00	–	cnnvd
CNNVD	Palo Alto Networks Expedition 安全漏洞	9 Oct 202400:00	–	cnnvd