9.8
Critical
CVE-2024-42505 Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
Description
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.
Affected products and versions
Other CVEs of Aruba OS
The 6 CVEs of Aruba OS →
CVE-2024-42507
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42506
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critical
CVE-2024-42503
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI)
7.2
High
CVE-2024-42502
Authenticated command injection vulnerability exists in the ArubaOS command line interface
7.2
High