CVE-2014-2592

Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-03-09

Last modified

2024-08-06

Weaknesses

CWE-434

Affected products

• Web Management Portal (Arubanetworks)

References

• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2592/