PT-2024-6566 · Aruba · Arubaos

·

CVE-2024-42503

·

تاريخ النشر

2024-08-02

·

تاريخ التحديث

2024-09-21

CVSS v2.0

9.0

عالية

المتجهAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: ArubaOS (affected versions not specified)
Description: The issue is related to the command line interface (CLI) of ArubaOS, where a lack of proper sanitization of special elements in operating system commands can be exploited. This allows a remote attacker to execute arbitrary commands. Successful exploitation results in the ability to run arbitrary commands as a privileged user on the underlying operating system.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2024-07710
CVE-2024-42503

المنتجات المتأثرة

Arubaos