CVE-2018-7082

🗓️ 10 May 2019 16:49:16Reported by hpeType

Command injection vulnerability in Aruba Instan

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Aruba Instant Web and Siemens SCALANCE W1750D Command Injection	4 Jun 201900:00	–	nessus
Tenable Nessus	Siemens SCALANCE W1750D Command Injection (CVE-2018-7082)	11 Apr 202300:00	–	nessus
BDU FSTEC	The vulnerability of the microprogrammed programmable logic controller SCALANCE, related to insufficient neutralization of special elements, allows a intruder to execute arbitrary system commands.	31 May 201900:00	–	bdu_fstec
Cvelist	CVE-2018-7082	10 May 201916:49	–	cvelist
EUVD	EUVD-2018-18825	7 Oct 202500:30	–	euvd
ICS	ICSA-19-134-07 Siemens SCALANCE W1750D	14 May 201900:00	–	ics
NVD	CVE-2018-7082	10 May 201917:29	–	nvd
OSV	CVE-2018-7082	10 May 201917:29	–	osv
Prion	Command injection	10 May 201917:29	–	prion
Positive Technologies	PT-2019-2098 · Aruba +1 · Aruba Instant +1	10 May 201900:00	–	ptsecurity

NVD

Node

arubanetworks aruba_instantRange4.0–4.2.4.12

arubanetworks aruba_instantRange6.5.0–6.5.4.11

arubanetworks aruba_instantRange8.3.0.0–8.3.0.6

arubanetworks aruba_instantRange8.4.0–8.4.0.1

Node

siemens scalance_w1750d_firmwareRange<8.4.0.1

AND

siemens scalance_w1750dMatch-

[
  {
    "product": "Aruba Instant (IAP)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aruba Instant 4.x prior to 6.4.4.8 - 4.2.4.12 Aruba Instant 6.5.x prior to 6.5.4.11 Aruba Instant 8.3.x prior to 8.3.0.6 Aruba Instant 8.4.x prior to 8.4.0.1"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/108374
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-001.txt
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-549547.pdf

17 Jun 2026 02:02Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

CVSS 29

EPSS0.04269

CWE-78