Aruba Networks ArubaOS Command Injection Vulnerability (CNVD-2021-71260)

Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks (including mobile controllers and mobile access switches) from Aruba Networks, is vulnerable to a command injection vulnerability. The vulnerability is caused by incorrect validation of certain NTFS metadata by the application and can be exploited by an attacker to cause a buffer overflow.