Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Aruba ArubaOS ausnutzen, um beliebigen Programmcode und beliebige Systemkommandos auszuführen.
Product
ArubaOS ist das Betriebssystem der Aruba Netzwerkprodukte.
Vulnerabilities 2
-
High 7.2
Authenticated Remote Code Execution in AOS Web-based Management Interface
An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated user to leverage parameter injection to overwrite arbitrary system …
-
High 7.2
Authenticated Command Injection Vulnerability allows Unauthorized Command Execution in CLI Interface
Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating s…
Revision history
-
#1
Initiale Fassung
References
-
HPE Security Bulletin HPESBNW04723 rev.1 vom 2025-01-14
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04723en_us&docLocale=en_US