7.2
High
CVE-2024-42502 Authenticated command injection vulnerability exists in the ArubaOS command line interface
Description
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba OS | Versions not published | |
| arubaos 10.6 | 10.6.0.0 → 10.6.0.2 | No fix stated |
| arubaos 10.5 | 10.5.0.0 → 10.6.0.0 | No fix stated |
| arubaos 10.3 | 10.3.0.0 → 10.4.0.0 | No fix stated |
| arubaos 8.12 | 8.12.0.0 → 8.12.0.1 | No fix stated |
| arubaos 8.11 | 8.11.0.0 → 8.12.0.0 | No fix stated |
| arubaos 8.10 | 8.10.0.0 → 8.10.0.13 | No fix stated |
| arubaos 6.5 | 6.5.4.0 → 8.9.0.0 | No fix stated |
Other CVEs of Aruba OS
The 6 CVEs of Aruba OS →
CVE-2024-42507
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42506
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42505
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42503
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI)
7.2
High