CVE-2024-42502

Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface

High · published September 17, 2024

CVSS v3.1
7.2
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Authenticated command injection vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability result in the ability to inject shell commands on the underlying operating system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01785 · 78.1th percentile
Published
2024-09-17T17:14Z
EPSS history
Timeline
  • 17 SEP 17:14Z
    Authenticated Remote Command Execution (RCE) Vulnerability in the AOS Command Line Interface
    cvelistv5