Palo Alto Networks has issued a warning about several critical vulnerabilities in its Expedition tool, which is used to migrate firewall configurations. These vulnerabilities allow attackers to take control of administrative accounts in PAN-OS firewalls, gaining access to sensitive information such as usernames, plaintext passwords, device configurations, and API keys.
To mitigate these risks, Palo Alto recommends updating Expedition to version 1.2.96 or higher and rotating all affected credentials, including usernames, passwords, and API keys. Additionally, it is recommended to restrict network access to authorized users and hosts only.
For more information and patches, you can visit the official Palo Alto Networks website.