Description
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Metrics
CVSS 3.1 7.2/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Hewlett Packard Enterprise (HPE) | ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | ArubaOS 10.5.x.x: 10.5.0.1 and below; ArubaOS 10.4.x.x: 10.4.0.3 and below; ArubaOS 8.11.x.x: 8.11.2.0 and below; ArubaOS 8.10.x.x: 8.10.0.9 and below |
| arubanetworks | arubaos | >= 10.5.0.0, <= 10.5.0.1 |
| arubanetworks | arubaos | >= 10.4.0.0, <= 10.4.0.3 |
| arubanetworks | arubaos | >= 8.11.0.0, <= 8.11.2.0 |
| arubanetworks | arubaos | >= 8.10.0.0, <= 8.10.0.9 |
| arubanetworks | arubaos | >= 10.3.0.0, < 10.4.0.0 |
| arubanetworks | arubaos | >= 8.9.0.0, < 8.10.0.0 |
| arubanetworks | arubaos | >= 8.8.0.0, < 8.9.0.0 |
| arubanetworks | arubaos | >= 8.7.0.0, < 8.8.0.0 |
| arubanetworks | arubaos | >= 8.6.0.0, < 8.7.0.0 |
| arubanetworks | arubaos | >= 6.5.4.0, < 6.5.5.0 |
| arubanetworks | sd-wan | >= 8.7.0.0, < 8.8.0.0 |
| arubanetworks | sd-wan | >= 8.6.0.4, < 8.7.0.0 |
References
Timeline
- Published
- Mar 5, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed