CVE-2024-25612

Published Mar 5, 2024 CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Description
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2024-22934 Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
History
Type Values Removed Values Added
First Time appeared Arubanetworks
Arubanetworks arubaos
CPEs cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Vendors & Products Arubanetworks
Arubanetworks arubaos
Weaknesses

Sources

Status
PUBLISHED
Assigner
hpe
Published
Updated
Aug 1, 2024, 11:44 PM
Reserved
Feb 8, 2024, 6:08 PM
Status
Analyzed
Published
Mar 5, 2024, 9:15 PM
Modified
Jun 17, 2026, 7:16 AM