SWSandworm Watch
target entity

Expedition

3 source-linked records in the current knowledge graph.

high

CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability

Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-9465EPSS 99.6%ExpeditionPalo Alto Networks
CISA KEV ↗ · unattributed attribution
high

CVE-2024-9463: Palo Alto Networks Expedition OS Command Injection Vulnerability

Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-9463EPSS 98.5%ExpeditionPalo Alto Networks
CISA KEV ↗ · unattributed attribution
high

CVE-2024-5910: Palo Alto Networks Expedition Missing Authentication Vulnerability

Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-5910EPSS 91.8%ExpeditionPalo Alto Networks
CISA KEV ↗ · unattributed attribution