CVE-2020-24640

There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security-alert@hpe.com

Published

2021-01-15

Last modified

2024-08-04

Affected products

• Airwave Glass (Arubanetworks)

References

• https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-001.txt