Skip to content
OpenAdvisories
High · 7.2 CVE-2024-54008 EUVD-2024-52239GHSA-8q75-6f6h-8grp

Authenticated Remote Code Execution (RCE) in HPE Aruba Networking AirWave Management Platform

Published Dec 10, 2024 · Updated Dec 11, 2024 · Assigned by hpe

Description

An authenticated Remote Code Execution (RCE) vulnerability exists in the AirWave CLI. Successful exploitation of this vulnerability could allow a remote authenticated threat actor to run arbitrary commands as a privileged user on the underlying host.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking AirWave Management Platform 8.0.0.0 – ≤ 8.3.0.3 —

References