Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
2023-07-05T15:15:09.507
2024-11-21T08:09:05.470
Modified
CVSSv3.1: 7.2 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.6.0.21 | Yes |
| Operating System | arubanetworks | arubaos | < 8.10.0.7 | Yes |
| Operating System | arubanetworks | arubaos | < 8.11.1.1 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.0.2 | Yes |
| Application | arubanetworks | mc-va-10 | - | No |
| Application | arubanetworks | mc-va-1k | - | No |
| Application | arubanetworks | mc-va-250 | - | No |
| Application | arubanetworks | mc-va-50 | - | No |
| Application | arubanetworks | mcr-va-10k | - | No |
| Application | arubanetworks | mcr-va-1k | - | No |
| Application | arubanetworks | mcr-va-50 | - | No |
| Application | arubanetworks | mcr-va-500 | - | No |
| Application | arubanetworks | mcr-va-5k | - | No |
| Application | arubanetworks | sd-wan | - | No |
| Hardware | arubanetworks | mcr-hw-10k | - | No |
| Hardware | arubanetworks | mcr-hw-1k | - | No |
| Hardware | arubanetworks | mcr-hw-5k | - | No |