CVE-2014-8368

The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.

Score

CVSS 2.0 9.0 Critical

Status

Modified - cve@mitre.org

Published

2014-11-25

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Airwave (Arubanetworks)

References

• http://secunia.com/advisories/62578
• http://www.arubanetworks.com/support/alerts/aid-11192014.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98871