Описание
Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.
Уязвимые конфигурации
Конфигурация 1Версия от 8.10.0.0 (включая) до 8.10.0.19 (исключая)Версия от 8.12.0.0 (включая) до 8.12.0.6 (исключая)Версия от 8.13.0.0 (включая) до 8.13.1.0 (исключая)Версия от 10.4.0.0 (включая) до 10.4.1.9 (исключая)Версия от 10.7.0.0 (включая) до 10.7.2.1 (исключая)
Одно из
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00086
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
CVSS3: 6.5
github
4 месяца назад
Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system.
EPSS
Процентиль: 25%
0.00086
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284