Palo Alto Networks confirmed active exploitation of recently disclosed zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-9463+1 related CVE | Unauthenticated OS Command Injection in Palo Alto Networks Expedition | 9.9 group max | 99% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 173.239.218.251 | originating from the following IP addresses 136.144.17[.]* 173.239.218[.]251 216.73.162[.]* The advisory pointed out that these IP add |
| sha256 | 3c5f9034c86cb1952aa5bb07b4f77ce7d8bb5cc9fe5c029a32c72adc7e814668 | s pending assignment. “We observed a webshell with checksum 3C5F9034C86CB1952AA5BB07B4F77CE7D8BB5CC9FE5C029A32C72ADC7E814668.” reads the advisory. Restricting management interface acce |
From the original article
2 min read at securityaffairs.com
Palo Alto Networks confirmed active exploitation of a zero-day in its PAN-OS firewall and released new indicators of compromise (IoCs). Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4. 0 Base Score: 9.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.