KEVIntel
Back to KEVs
9.3
CVSS
Critical

CVE-2024-5910

PUBLISHED

Expedition: Missing Authentication Leads to Admin Account Takeover

Exploited in the wild Remote Low complexity No user interaction
Vendor
Palo Alto Networks
Product
Expedition
Published
Jul 10, 2024
EPSS
—

Description

Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration, tuning, and enrichment. Configuration secrets, credentials, and other data imported into Expedition is at risk due to this issue.

cisa nuclei_scanner edge metasploit nessus_scanner

CVSS scores

CVSS v4.0 9.3 Critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/AU:Y/R:U/V:D/RE:M/U:Red

Exploitation status

Exploited in the wild

Recorded 2024-11-07 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Nov 07, 2024

Scanner integrations

Scanner Reference Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/paloalto_expedition_rce.rb Apr 28, 2025
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5910.yaml Apr 25, 2025
Nessus https://www.tenable.com/plugins/nessus/210954 Nov 14, 2024

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Nessus

  • Detected by Nuclei

  • Detected by Metasploit