Description
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Ha | ArubaOS 10.5.x.x: 10.5.0.0 and below, ArubaOS 10.4.x.x: 10.4.0.2 and below, InstantOS 8.11.x.x: 8.11.1.2 and below, InstantOS 8.10.x.x: 8.10.0.8 and below, InstantOS 8.6.x.x: 8.6.0.22 and below | — |
Advisories 3
- ICSA-24-046-01 Siemens SCALANCE W1750D CISA ICS & IT advisories · Apr 9, 2024
- SSA-716164 SSA-716164: Multiple Vulnerabilities in Scalance W1750D Siemens ProductCERT · Apr 9, 2024
- WID-SEC-2023-2915 Aruba ArubaOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 14, 2023