Skip to content
Sign in
Not rated

CVE-2019-5315 A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated…

Description

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

Affected products and versions

Product Affected versions Fixed in
Aruba Mobility Controllers Versions not published

Other CVEs of Aruba Mobility Controllers

The 3 CVEs of Aruba Mobility Controllers →
CVE-2019-5314 Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS Not rated CVE-2018-7081 A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS Not rated
Track this CVE