7.2
Élevée
CVE-2024-42501 An authenticated Path Traversal vulnerabilities exists in the ArubaOS
Description
An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system, enabling the threat actor to execute arbitrary code or install implants.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aruba OS | Versions non publiées | |
| arubaos 10.6 | 10.6.0.0 → 10.6.0.2 | Pas de correctif indiqué |
| arubaos 10.5 | 10.5.0.0 → 10.6.0.0 | Pas de correctif indiqué |
| arubaos 10.3 | 10.3.0.0 → 10.4.0.0 | Pas de correctif indiqué |
| arubaos 8.12 | 8.12.0.0 → 8.12.0.1 | Pas de correctif indiqué |
| arubaos 8.11 | 8.11.0.0 → 8.12.0.0 | Pas de correctif indiqué |
| arubaos 8.10 | 8.10.0.0 → 8.10.0.13 | Pas de correctif indiqué |
| arubaos 6.5 | 6.5.4.0 → 8.9.0.0 | Pas de correctif indiqué |
Autres CVE de Aruba OS
Les 6 CVE de Aruba OS →
CVE-2024-42507
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42506
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42505
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42503
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI)
7.2
Élevée