Exploit / PoCcritical

Palo Alto fixed critical flaws in PAN-OS firewalls that allow for full compromise of the devices

Security Affairsby @securityaffairsOct 10, 2024 · 05:24 UTC (Oct 10, 2024)2 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-9463 CVE-2024-9464 CVE-2024-9465 CVE-2024-9466 CVE-2024-9467 CVE-2024-5910

Tags: cve-2024-9463 cve-2024-9464 cve-2024-9465 cve-2024-9466 cve-2024-9467 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-5910	Unauthenticated Admin Account Takeover in Palo Alto Networks Expedition	9.3	92%	KEVPoC	Jul 10, 2024 KEV Nov 7, 2024
CVE-2024-9463 +1 related CVE CVE-2024-9465	Unauthenticated OS Command Injection in Palo Alto Networks Expedition	9.9 group max	99%	KEV	Oct 9, 2024 KEV Nov 14, 2024
CVE-2024-9464 +2 related CVEs CVE-2024-9466 CVE-2024-9467	Authenticated OS Command Injection in Palo Alto Networks Expedition	9.3 group max	83%		Oct 9, 2024

From the original article

2 min read at securityaffairs.com

Palo Alto fixed critical flaws in PAN-OS firewalls, warning that attackers could chain these vulnerabilities to hijack the devices. Palo Alto Networks addressed multiple vulnerabilities that an attacker can chain to hijack PAN-OS firewalls.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.