Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-5910 | Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition | 9.3 | 92% | KEVPoC | KEV |
CVE-2024-9464+1 related CVE | Authenticated OS Command Injection in Palo Alto Networks Expedition | 9.3 group max | 83% | ||
| CVE-2024-9465 | Unauthenticated SQL Injection in Palo Alto Networks Expedition | 9.2 | 100% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
A vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition, a firewall configuration migration tool, is being exploited by attackers in the wild, the Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Thursday.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.