CVE-2020-24632

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A remote execution of arbitrary commandss vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-246339.8There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted paCVE-2020-246349.8An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP ManaCVE-2020-246357.2A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaCVE-2020-246369.8A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): ArubaCVE-2020-246377.2Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerabiliCVE-2020-246387.2Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user wCVE-2020-246399.8There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment wiCVE-2020-246409.8There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment CVE-2020-246417.5In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if succesCVE-2020-246469.8A tftpserver stack-based buffer overflow remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) versiCVE-2020-246479.8A remote accessmgrservlet classname input validation code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) CVE-2020-246489.8A accessmgrservlet classname deserialization of untrusted data remote code execution vulnerability was discovered in HPE Intelligent Managem
CVE-2020-24632: High severity, CVSS 7.2 | Vulnix