CVE-2024-47464
An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote unauthorized access to files.
- Score
- CVSS 3.1 6.8 Medium
- Status
- Deferred - security-alert@hpe.com
- Published
- 2024-11-05
- Last modified
- 2024-11-06
- Weaknesses
- CWE-22
Affected products
- And Aos-10 (Hewlett Packard Enterprise Hpe)
- Hpe Aruba Networking Access Points (Hewlett Packard Enterprise Hpe)
- Instant Aos-8 (Hewlett Packard Enterprise Hpe)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04722en_us&docLocale=en_US
