7.2
High
CVE-2024-42501 An authenticated Path Traversal vulnerabilities exists in the ArubaOS
Description
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba OS | Versions not published | |
| arubaos 10.6 | 10.6.0.0 → 10.6.0.2 | No fix stated |
| arubaos 10.5 | 10.5.0.0 → 10.6.0.0 | No fix stated |
| arubaos 10.3 | 10.3.0.0 → 10.4.0.0 | No fix stated |
| arubaos 8.12 | 8.12.0.0 → 8.12.0.1 | No fix stated |
| arubaos 8.11 | 8.11.0.0 → 8.12.0.0 | No fix stated |
| arubaos 8.10 | 8.10.0.0 → 8.10.0.13 | No fix stated |
| arubaos 6.5 | 6.5.4.0 → 8.9.0.0 | No fix stated |
Other CVEs of Aruba OS
The 6 CVEs of Aruba OS →
CVE-2024-42507
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42506
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42505
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42503
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI)
7.2
High