CVE-2024-9463 — Vulnetix

CVE-2024-9463 PUBLISHED KEV

In PaloAlto Networks Expedition bestehen mehrere Schwachstellen, die auf eine unzureichende Bereinigung von Eingaben zurückzuführen sind. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um Betriebssystembefehle einzuschleusen und mit Root-Rechten auszuführen, was zur Offenlegung sensibler Daten wie Benutzernamen, Klartextpasswörtern, Gerätekonfigurationen und API-Schlüsseln von PAN-OS-Firewalls führt.

EPSS 94.20% · 99.9th percentile

Risk Scores

EPSS Score

94.20%

99.9th percentile

Affected Products

Vendor	Product	Versions
PaloAlto Networks	PaloAlto Networks Expedition <1.2.96

Exploit Intelligence

Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc-repo)
Proof of Concept for CVE-2024-9463 (github-poc)

…and 75 more exploits

Timeline

Oct 9, 2024 CVE Published
Oct 10, 2024 EPSS Score
Oct 14, 2024 Coalition ESS Score
Oct 16, 2024 EPSS Score
Oct 16, 2024 Coalition ESS Score
Oct 17, 2024 Coalition ESS Score
Oct 29, 2024 EPSS Score
Nov 14, 2024 CISA KEV Added
Nov 14, 2024 Coalition ESS Score
Nov 15, 2024 EPSS Score
Nov 15, 2024 Coalition ESS Score
Nov 15, 2024 Coalition ESS Score

References

Open in Interactive Console →