PT-2021-7450
CVE-2020-24636
·
تاريخ النشر
2021-03-09
·
تاريخ التحديث
2022-05-12
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Aruba Instant versions 6.5.4.17 and below
Aruba Instant versions 8.3.0.13 and below
Aruba Instant versions 8.5.0.10 and below
Aruba Instant versions 8.6.0.5 and below
Aruba Instant versions 8.7.0.0 and below
Description
The issue is related to a lack of data sanitization on the management level, allowing a remote attacker to execute arbitrary commands by sending specially crafted data. This can be exploited to gain unauthorized access and control.
Recommendations
For Aruba Instant versions 6.5.4.17 and below, update to a version above 6.5.4.17 to address the security vulnerability.
For Aruba Instant versions 8.3.0.13 and below, update to a version above 8.3.0.13 to address the security vulnerability.
For Aruba Instant versions 8.5.0.10 and below, update to a version above 8.5.0.10 to address the security vulnerability.
For Aruba Instant versions 8.6.0.5 and below, update to a version above 8.6.0.5 to address the security vulnerability.
For Aruba Instant versions 8.7.0.0 and below, update to a version above 8.7.0.0 to address the security vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾