Friday, 10 January, 2025

Critical Vulnerabilities in Palo Alto Networks' Expedition Tool Demand Immediate Attention

Palo Alto Networks has identified multiple critical vulnerabilities in its Expedition tool, notably CVE-2024-9463 and CVE-2024-9465, which allow unauthenticated attackers to execute arbitrary OS commands and access sensitive data, including firewall credentials. Exploits for these vulnerabilities are publicly available, increasing the risk of attacks. Users are strongly advised to update to Expedition version 1.2.96 or later and rotate all associated credentials to mitigate potential threats.