7.2
Élevée
CVE-2024-42502 Authenticated command injection vulnerability exists in the ArubaOS command line interface
Description
Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aruba OS | Versions non publiées | |
| arubaos 10.6 | 10.6.0.0 → 10.6.0.2 | Pas de correctif indiqué |
| arubaos 10.5 | 10.5.0.0 → 10.6.0.0 | Pas de correctif indiqué |
| arubaos 10.3 | 10.3.0.0 → 10.4.0.0 | Pas de correctif indiqué |
| arubaos 8.12 | 8.12.0.0 → 8.12.0.1 | Pas de correctif indiqué |
| arubaos 8.11 | 8.11.0.0 → 8.12.0.0 | Pas de correctif indiqué |
| arubaos 8.10 | 8.10.0.0 → 8.10.0.13 | Pas de correctif indiqué |
| arubaos 6.5 | 6.5.4.0 → 8.9.0.0 | Pas de correctif indiqué |
Autres CVE de Aruba OS
Les 6 CVE de Aruba OS →
CVE-2024-42507
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42506
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42505
Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…
9.8
Critique
CVE-2024-42503
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI)
7.2
Élevée