CVE-2024-42503

Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)

High · published September 17, 2024

CVSS v3.1
7.2
EPSS
2%
Percentile
74.1
In the wild
Unconfirmed
What it is

Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01501 · 74.1th percentile
Published
2024-09-17T17:16Z
EPSS history
Timeline
  • 17 SEP 17:16Z
    Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)
    cvelistv5