Description
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hewlett Packard Enterprise (HPE) | Aruba OS | Version 10.6.0.0: 10.6.0.2 and below – ≤ <=10.6.0.2, Version 8.10.0.0: 8.10.0.13 and below – ≤ <=8.10.0.13, Version 10.5.0.0: 10.6.0.0 and below – ≤ <=10.6.0.0, Version 10.3.0.0: 10.4.0.0 and below – ≤ <=10.4.0.0, Version 8.11.0.0: 8.12.0.0 and below – ≤ <=8.12.0.0, Version 8.12.0.0: 8.12.0.1 and b… | — |
Advisories 1
- WID-SEC-2024-2172 Aruba ArubaOS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 17, 2024