CVE-2025-0107
Expedition: OS Command Injection Vulnerability
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclosure of usernames, cleartext passwords, device configurations, and device API keys for firewalls running PAN-OS software.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Green
Produtos afetados
Palo Alto Networks · Cloud NGFWPalo Alto Networks · ExpeditionPalo Alto Networks · PanoramaPalo Alto Networks · PAN-OSPalo Alto Networks · Prisma AccessQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →