Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-5910 | Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition | 9.3 | 92% | KEVPoC | KEV |
CVE-2024-9463+1 related CVE | Unauthenticated OS Command Injection in Palo Alto Networks Expedition | 9.9 group max | 99% | KEV | KEV |
| CVE-2024-9464 | Authenticated OS Command Injection in Palo Alto Networks Expedition | 9.3 | 83% |
From the original article
2 min read at helpnetsecurity.com
Attackers have been spotted exploiting two additional vulnerabilities (CVE-2024-9463, CVE-2024-9465) in Palo Alto Networks’ Expedition firewall configuration migration tool, CISA has confirmed on Thursday.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.