Lucene search

K
cveMitreCVE-2015-1388
HistoryMar 24, 2015 - 5:59 p.m.

CVE-2015-1388

2015-03-2417:59:05
CWE-78
mitre
web.nvd.nist.gov
33
cve-2015-1388
arubaos
remote access point
command execution
security vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

62.0%

The “RAP console” feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected configurations

Nvd
Node
arubanetworksarubaosRange6.2.3.9
OR
arubanetworksarubaosMatch6.1.3.0
OR
arubanetworksarubaosMatch6.1.3.1
OR
arubanetworksarubaosMatch6.1.3.2
OR
arubanetworksarubaosMatch6.1.3.3
OR
arubanetworksarubaosMatch6.1.3.4
OR
arubanetworksarubaosMatch6.1.3.5
OR
arubanetworksarubaosMatch6.1.3.6
OR
arubanetworksarubaosMatch6.1.3.7
OR
arubanetworksarubaosMatch6.1.3.8
OR
arubanetworksarubaosMatch6.1.3.9
OR
arubanetworksarubaosMatch6.2.3.1
OR
arubanetworksarubaosMatch6.2.3.2
OR
arubanetworksarubaosMatch6.2.3.3
OR
arubanetworksarubaosMatch6.2.3.4
OR
arubanetworksarubaosMatch6.2.3.5
OR
arubanetworksarubaosMatch6.2.3.6
OR
arubanetworksarubaosMatch6.2.3.7
OR
arubanetworksarubaosMatch6.2.3.8
OR
arubanetworksarubaosMatch6.3.0.0
OR
arubanetworksarubaosMatch6.3.1
OR
arubanetworksarubaosMatch6.3.1.1
OR
arubanetworksarubaosMatch6.3.1.2
OR
arubanetworksarubaosMatch6.3.1.3
OR
arubanetworksarubaosMatch6.3.1.4
OR
arubanetworksarubaosMatch6.3.1.5
OR
arubanetworksarubaosMatch6.3.1.6
OR
arubanetworksarubaosMatch6.3.1.7
OR
arubanetworksarubaosMatch6.3.1.8
OR
arubanetworksarubaosMatch6.3.1.9
OR
arubanetworksarubaosMatch6.3.1.10
OR
arubanetworksarubaosMatch6.3.1.11
OR
arubanetworksarubaosMatch6.3.1.12
OR
arubanetworksarubaosMatch6.3.1.13
OR
arubanetworksarubaosMatch6.3.1.14
OR
arubanetworksarubaosMatch6.4.2.3
OR
arubanetworksarubaosMatch6.4.2.4
OR
arubanetworksarubaosMatch6.4.2.5
VendorProductVersionCPE
arubanetworksarubaos*cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.0cpe:2.3:o:arubanetworks:arubaos:6.1.3.0:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.1cpe:2.3:o:arubanetworks:arubaos:6.1.3.1:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.2cpe:2.3:o:arubanetworks:arubaos:6.1.3.2:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.3cpe:2.3:o:arubanetworks:arubaos:6.1.3.3:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.4cpe:2.3:o:arubanetworks:arubaos:6.1.3.4:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.5cpe:2.3:o:arubanetworks:arubaos:6.1.3.5:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.6cpe:2.3:o:arubanetworks:arubaos:6.1.3.6:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.7cpe:2.3:o:arubanetworks:arubaos:6.1.3.7:*:*:*:*:*:*:*
arubanetworksarubaos6.1.3.8cpe:2.3:o:arubanetworks:arubaos:6.1.3.8:*:*:*:*:*:*:*
Rows per page:
1-10 of 381

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.002

Percentile

62.0%

Related for CVE-2015-1388