Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-89450
HistoryOct 10, 2021 - 12:00 a.m.

Aruba Instant Command Injection Vulnerability (CNVD-2021-89450)

2021-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
aruba instant
command injection
vulnerability
wireless network
input validation
web interface
http request
arbitrary os commands
cnvd-2021-89450.

EPSS

0.003

Percentile

70.9%

Aruba Instant is a wireless network. Providing the only Wi-Fi solution that is easy to set up, Aruba Instant is vulnerable to a command injection vulnerability, which is caused by incorrect input validation in the web interface. An attacker could exploit the vulnerability to send a carefully crafted HTTP request to the application and execute arbitrary OS commands on the target system.

EPSS

0.003

Percentile

70.9%

Related for CNVD-2021-89450