Skip to content
OpenAdvisories
High · 7.2 CVE-2024-42503 EUVD-2024-39651GHSA-vrrc-qv8c-m5rg

Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)

Published Sep 17, 2024 · Updated Sep 18, 2024 · Assigned by hpe

Vendor: Hewlett Packard Enterprise (HPE) Product: Aruba OS

Description

Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Aruba OS Version 10.6.0.0: 10.6.0.2 and below – ≤ <=10.6.0.2, Version 8.10.0.0: 8.10.0.13 and below – ≤ <=8.10.0.13, Version 10.5.0.0: 10.6.0.0 and below – ≤ <=10.6.0.0, Version 10.3.0.0: 10.4.0.0 and below – ≤ <=10.4.0.0, Version 8.11.0.0: 8.12.0.0 and below – ≤ <=8.12.0.0, Version 8.12.0.0: 8.12.0.1 and b… —

Advisories 1

References