9.8crit
CVE-2018-10143in critical feed
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system…
Published 7 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
24.8%
percentile 98%
Public exploits
0
none known
Summary
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.
Exploit prediction (EPSS)
24.85% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Palo Alto Networks Palo Alto Networks Expedition
Classification
- Weakness
- CWE-269 Improper Privilege Management
References
- securityfocus.com /bid/106174 · vdb-entry, x_refsource_BID, x_transferred
- doddsecurity.com /234/command-injection-on-palo-alto-networks-expedition/ · x_refsource_MISC, x_transferred
- security.paloaltonetworks.com /CVE-2018-10143 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2018-10143
- NVD: CVE-2018-10143
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.