Wednesday , October 30 2024
Palo alto network

CVE-2024-5910
Critical Vulnerability Threatens Palo Alto Networks’ Expedition

Palo Alto Networks has issued a critical security advisory outlining numerous vulnerabilities across its product lines, such as PAN-OS, Cortex XDR, and Expedition. These weaknesses vary in severity and potential impact, but collectively present a significant risk to organizations that depend on Palo Alto’s solutions.

CVE-2024-5910: Missing Authentication in Expedition (CVSS 9.3):

Rented bank account used to illegal transection: 5 arrested

The Indian Cyber Crime Coordination Centre (I4C) has warned about illegal payment gateways set up by transnational cyber criminals using...
Read More
Rented bank account used to illegal transection: 5 arrested

Successfully held “InfoSecCon-2024″at Dhaka Bangladesh

With a festive look and the participation of more than one hundred participants from Bangladesh cyber industry, another successful cyber...
Read More
Successfully held “InfoSecCon-2024″at Dhaka Bangladesh

Bangladeshi hacker hack for girlfriend’s expenses; finally caught

Fazle Hassan Anik hacked girls' Facebook accounts to steal sensitive pictures, which he used to blackmail them for money. He...
Read More
Bangladeshi hacker hack for girlfriend’s expenses; finally caught

Bangladeshi Social media flooded with unauthorized withdrawals from bank accounts

Bangladeshi Social media posts have raised concerns about unauthorized withdrawals from bank accounts, affecting at least 7 to 8 people...
Read More
Bangladeshi Social media flooded with unauthorized withdrawals from bank accounts

Unprotected UN Database Exposes 228GB of Gender Violence Victims’ Data

Cybersecurity researcher Jeremiah Fowler found a non-password-protected database with 115,000 records linked to the UN Trust Fund to End Violence...
Read More
Unprotected UN Database Exposes 228GB of Gender Violence Victims’ Data

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability

Cisco announced updates on Wednesday to fix a security flaw in its Adaptive Security Appliance (ASA) that is currently being...
Read More
Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability

Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024

White hat hackers at the Pwn2Own Ireland 2024 contest by Trend Micro's Zero Day Initiative earned $500,000 on the first...
Read More
Hackers Earn $500,000 on First Day of Pwn2Own Ireland 2024

Fortinet + Crowdstrike team on protection from endpoint to firewall

In today's rapidly changing cybersecurity environment, organizations encounter numerous complex threats targeting endpoints and networks. CrowdStrike and Fortinet have partnered...
Read More
Fortinet + Crowdstrike team on protection from endpoint to firewall

Sophos to Acquire Secureworks in $859M

Sophos, based in the UK, is to acquire Secureworks, a Nasdaq-listed company, for $859 million in cash from Dell Technologies....
Read More
Sophos to Acquire Secureworks in $859M

2nd time hacker breached Internet Archive

The Internet Archive was breached again, this time through their Zendesk email support platform, following warnings that threat actors had...
Read More
2nd time hacker breached Internet Archive

The vulnerability CVE-2024-5910 affects the Expedition configuration management tool, allowing network access to be exploited by an attacker to take over admin accounts, potentially exposing sensitive data and credentials. It is important for all Expedition users to update to version 1.2.92 or later as soon as possible, as recommended by Palo Alto Networks.

PAN-OS Vulnerabilities:

PAN-OS, the operating system used by Palo Alto firewalls, has several vulnerabilities. These include an arbitrary file upload flaw (CVE-2024-5911), which could disrupt Panorama systems and cause service outages. Another vulnerability (CVE-2024-5913) allows privilege escalation if an attacker can manipulate the physical file system. Additionally, there is a man-in-the-middle vulnerability (CVE-2024-3596) that enables attackers to bypass authentication and obtain superuser privileges when using RADIUS authentication with CHAP or PAP.

Cortex XDR Agent Flaw:
The Cortex XDR agent, which protects endpoints, is affected by CVE-2024-5912. This flaw can allow attackers to bypass security measures and run untrusted software on compromised devices.

Mitigation and Remediation:
Palo Alto Networks advises all affected users to install the patches and updates as soon as possible. The security advisory also outlines specific workarounds and measures, such as restricting network access to Expedition and following best practices for securing administrative access to PAN-OS.

Check Also

Diagram

Vulnhuntr: A Tool for Finding Exploitable Vulnerabilities with LLMs

In today’s changing cybersecurity environment, it’s essential to find vulnerabilities in code. Vulnhuntr, an open-source …

Leave a Reply

Your email address will not be published. Required fields are marked *