CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- Score
- CVSS 3.1 7.2 High
- Status
- Analyzed - security-alert@hpe.com
- Published
- 2024-03-05
- Last modified
- 2024-08-01
- Weaknesses
- CWE-77
Affected products
- Arubaos (Arubanetworks)
- Sd-wan (Arubanetworks)
- Arubaos Wi-fi Controllers And Campusremote Access Points (Hewlett Packard Enterprise Hpe)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-002.txt
