6.8
Medium
CVE-2024-47464 An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10
Description
An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable location from the command line interface of the underlying operating system, which could lead to a remote unauthorized access to files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 | Versions not published |
Other CVEs of HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10
The 6 CVEs of HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 →
CVE-2024-47463
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface
7.2
High
CVE-2024-47462
An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface
7.2
High
CVE-2024-47461
An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface
7.2
High
CVE-2024-47460
Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by…
9.0
Critical