Advisory 2024-2318 - PaloAlto Networks Expedition: Vulnerability allows gaining administrative rights.

Notice: You can now also find information from the Vulnerability Advisory Service in the CTI portal!
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2024-2318

Notice: This advisory is by exception shown completely public. You will regularly receive details on vulnerability information as a customer via your login or through our daily advisory e-mail.

5	Attack probability high
5	Potential damage high

Date: 2024-11-08
Release: 2024-11-08

Operating System

Appliance
Hardware Appliance

Software

Palo Alto Networks Expedition < 1.2.92

Attack

A remote anonymous attacker can exploit a vulnerability in PaloAlto Networks Expedition in order to gain administrative rights.

Description

Palo Alto Expedition is a next-generation firewall (NGFW) platform.

CVE-2024-5910

There is a vulnerability in PaloAlto Networks Expedition. This flaw exists due to a missing authentication for a critical function. A remote anonymous attacker can exploit this vulnerability to take over the admin account.

CVSSv2 Base Score: 10.0 / Temporal Score: 8.7
AV:N/AC:L/AU:N/C:C/I:C/A:C/E:H/RL:OF/RC:ND
CVSSv3.1 Base Score: 10.0 / Temporal Score: 9.5
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:X

This vulnerability is already being exploited.

Recommendation

PaloAlto Networks provides updates. Please update your installation and see the vendor's advisory to find the proper version suitable for your environment.
https://security.paloaltonetworks.com/CVE-2024-5910

Information

NIST Security Advisory dated 2024-11-07
https://nvd.nist.gov/vuln/detail/CVE-2024-5910

Palo Alto Networks Security Advisory
https://security.paloaltonetworks.com/CVE-2024-5910

References

CVE:CVE-2024-5910

Disclaimer

*The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirect consequences of an attack for business processes. Telekom Security assumes worst case scenarios.

Copyright © 1999-2026 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.

The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.