7.2
High
CVE-2024-25613 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
Description
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | Versions not published | |
| arubaos 6.5 | 6.5.4.0 → < 6.5.5.0 | 6.5.5.0 |
| sd-wan 8.6 | 8.6.0.4 → < 8.7.0.0 | 8.7.0.0 |
Other CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
The 7 CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points →
CVE-2024-25616
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in…
3.7
Low
CVE-2024-25615
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol…
5.3
Medium
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS
5.5
Medium
CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
High