CVE-2020-24638

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli

published January 15, 2021

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03325 · 88.5th percentile
Published
2021-01-15T18:29Z
EPSS history
Timeline
  • 15 JAN 18:29Z
    Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli
    cvelistv5