Unrated severityCISA KEVNVD Advisory· Published Oct 9, 2024· Updated Oct 21, 2025
Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVE-2024-9463
Description
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Affected products
1- Palo Alto Networks/Expeditionv5cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*Range: 1.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- security.paloaltonetworks.com/PAN-SA-2024-0010mitrevendor-advisory
News mentions
0No linked articles in our index yet.