cve/2018/CVE-2018-10143.md

### [CVE-2018-10143](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10143)
![](https://img.shields.io/static/v1?label=Product&message=Palo%20Alto%20Networks%20Expedition&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Remote%20Code%20Execution&color=brighgreen)

### Description

The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.

### POC

#### Reference
- https://doddsecurity.com/234/command-injection-on-palo-alto-networks-expedition/

#### Github
No PoCs found on GitHub currently.