Описание
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system.
Уязвимые конфигурации
Конфигурация 1Версия от 8.10.0.0 (включая) до 8.10.0.16 (исключая)Версия от 8.12.0.0 (включая) до 8.12.0.4 (исключая)Версия от 10.4.0.0 (включая) до 10.4.1.7 (исключая)Версия от 10.7.0.0 (включая) до 10.7.1.1 (исключая)
Одно из
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00569
Низкий
7.2 High
CVSS3
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 7.2
github
10 месяцев назад
Authenticated command injection vulnerabilities exist in the AOS-10 GW and AOS-8 Controller/Mobility Conductor web-based management interface. Successful exploitation of these vulnerabilities allows an Authenticated attacker to execute arbitrary commands as a privileged user on the underlying operating system.
EPSS
Процентиль: 68%
0.00569
Низкий
7.2 High
CVSS3
Дефекты
CWE-77