CVE-2020-7128

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Nov 4, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-71297.2A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.CVE-2020-71307.5HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE OneView Global Dashboard - After Upgrade or ICVE-2020-71319.0This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products.CVE-2020-71325.4A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow CVE-2020-71339.8A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.CVE-2020-71346.5A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.CVE-2020-71357.8A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash CoCVE-2020-71369.8A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard EnCVE-2020-71376.7A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege. Apply HPE Superdome Flex Server version 3.2CVE-2020-71388.8Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an CVE-2020-71398.1Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attackerCVE-2020-71406.1A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site sc
CVE-2020-7128: Critical severity, CVSS 9.8 | Vulnix