High severity7.5CISA KEVNVD Advisory· Published Oct 9, 2024· Updated Jun 17, 2026
CVE-2024-9463
CVE-2024-9463
Description
An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:paloaltonetworks:expedition:*:*:*:*:*:*:*:*range: >=1.2.0,<1.2.96
- cpe:2.3:a:paloaltonetworks:expedition:1.2.0:-:*:*:*:*:*:*range: 1.2.0
- (no CPE)
Patches
Vulnerability mechanics
References
2- security.paloaltonetworks.com/PAN-SA-2024-0010nvdMitigationVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.