7.2
Élevée
CVE-2024-31476 Multiple authenticated command injection vulnerabilities exist in the command line interface
Description
Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AOS-8 Instant and AOS-10 AP 10.5 | 10.5.0.0 → 10.5.1.0 | Pas de correctif indiqué |
| AOS-8 Instant and AOS-10 AP 10.4 | 10.4.0.0 → 10.4.1.0 | Pas de correctif indiqué |
| AOS-8 Instant and AOS-10 AP 8.11 | 8.11.0.0 → 8.11.2.1 | Pas de correctif indiqué |
| AOS-8 Instant and AOS-10 AP 8.10 | 8.10.0.0 → 8.10.0.10 | Pas de correctif indiqué |
| AOS-8 Instant and AOS-10 AP 8.6 | 8.6.0.0 → 8.6.0.23 | Pas de correctif indiqué |
| arubaos 10.3 | 10.3.0.0 → < 10.4.0.0 | 10.4.0.0 |
| instant 6.4 | 6.4.0.0 → < 6.5.0.0 | 6.5.0.0 |
Autres CVE de AOS-8 Instant and AOS-10 AP
Les 18 CVE de AOS-8 Instant and AOS-10 AP →
CVE-2024-31483
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol
4.9
Moyenne
CVE-2024-31482
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI…
5.3
Moyenne
CVE-2024-31481
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol
5.3
Moyenne
CVE-2024-31480
Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol
5.3
Moyenne