CVE-2024-42503 | THREATINT

Description

Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.

Reserved 2024-08-02 | Published 2024-09-17 | Updated 2024-09-18 | Assigner hpe

HIGH: 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Product status

Default status

affected

Version 10.6.0.0: 10.6.0.2 and below

affected

Version 8.10.0.0: 8.10.0.13 and below

affected

Version 10.5.0.0: 10.6.0.0 and below

affected

Version 10.3.0.0: 10.4.0.0 and below

affected

Version 8.11.0.0: 8.12.0.0 and below

affected

Version 8.12.0.0: 8.12.0.1 and below

affected

Version 6.5.4.0: 8.9.0.0 and below

affected

Credits

erikdejong reporter

References

support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04709en_us&docLocale=en_US

cve.org (CVE-2024-42503)

nvd.nist.gov (CVE-2024-42503)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.