Skip to content
OpenAdvisories
High WID-SEC-2024-2214 3 CVEs

Aruba ArubaOS: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten

Published Sep 24, 2024 · Updated Sep 24, 2024 · de-DE

Vendor: Aruba Product: ArubaOS

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.

Product

ArubaOS ist das Betriebssystem der Aruba Netzwerkprodukte.

Vulnerabilities 3

  • Critical 9.8
    CVE-2024-42505

    Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol

    Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation o…

    Hewlett Packard Enterprise (HPE) Aruba OS
  • Critical 9.8
    CVE-2024-42506

    Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol

    Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation o…

    Hewlett Packard Enterprise (HPE) Aruba OS
  • Critical 9.8
    CVE-2024-42507

    Unauthenticated Command Injection Vulnerabilities in the CLI Service Accessed by the PAPI Protocol

    Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation o…

    Hewlett Packard Enterprise (HPE) Aruba OS

Revision history

  1. #1

    Initiale Fassung

References