CVE-2024-9464: Improper Neutralization of Special Elements used in an OS Command

🗓️ 09 Oct 2024 00:00:00Reported by Rapid7Type

Authenticated OS command injection in Palo Alto Networks Expedition allows root access.

Reporter	Title	Published	Views	Family All 22
zdt	Palo Alto Expedition 1.2.91 Remote Code Execution Exploit	14 Nov 202400:00	–	zdt
attackerkb	CVE-2024-5910	10 Jul 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Palo Alto Networks Expedition configuration migration tool lies in the lack of measures to neutralize special elements used in the operating system team. This allows attackers to enhance their privileges and execute arbitrary commands on the basic operating system.	17 Oct 202400:00	–	bdu_fstec
Circl	CVE-2024-9464	9 Oct 202416:49	–	circl
CNNVD	Palo Alto Networks Expedition 安全漏洞	9 Oct 202400:00	–	cnnvd
CVE	CVE-2024-9464	9 Oct 202417:03	–	cve
Cvelist	CVE-2024-9464 Expedition: Authenticated OS Command Injection Vulnerability Leads to Firewall Admin Credential Disclosure	9 Oct 202417:03	–	cvelist
GithubExploit	Exploit for OS Command Injection in Paloaltonetworks Expedition	9 Oct 202416:36	–	githubexploit
Kitploit	CVE-2024-9464	28 Sep 202604:14	–	kitploit
Metasploit	Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)	9 Oct 202400:00	–	metasploit