Aller au contenu
Se connecter
9.8 Critique

CVE-2024-42505 Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by…

Description

Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

Produits et versions touchés

Produit Versions touchées Corrigé en
Aruba OS Versions non publiées
arubaos 10.5 10.5.0.0 → 10.6.0.2 Pas de correctif indiqué
arubaos 10.0 10.0.0.0 → 10.4.1.13 Pas de correctif indiqué
arubaos 8.11 8.11.0.0 → 8.12.0.1 Pas de correctif indiqué
arubaos 6.4 6.4.0.0 → 8.10.0.13 Pas de correctif indiqué

Autres CVE de Aruba OS

Les 6 CVE de Aruba OS →
CVE-2024-42507 Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by… 9.8 Critique CVE-2024-42506 Command injection vulnerabilities in the underlying CLI service could lead to unauthenticated remote code execution by… 9.8 Critique CVE-2024-42503 Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI) 7.2 Élevée CVE-2024-42502 Authenticated command injection vulnerability exists in the ArubaOS command line interface 7.2 Élevée
Suivre cette CVE