CVE-2020-24634

🗓️ 11 Dec 2020 01:22:50Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 82 Views

Remotely inject arbitrary commands via PAPI UDP port (8211) in Aruba 9000 Gateway, 7000 Series Mobility Controllers, 7200 Series Mobility Controllers (v2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below

Reporter	Title	Published	Views	Family All 6
CNNVD	Aruba Networks ArubaOS Command Injection Vulnerability	9 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-24634	11 Dec 202001:22	–	cvelist
EUVD	EUVD-2020-17350	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in ArubaOS	11 Dec 202000:00	–	ncsc
NVD	CVE-2020-24634	11 Dec 202002:15	–	nvd
Prion	Code injection	11 Dec 202002:15	–	prion

NVD

Node

arubanetworks arubaosRange<8.2.2.10

arubanetworks arubaosRange8.3.0.0–8.3.0.14

arubanetworks arubaosRange8.4.0.0–8.5.0.11

arubanetworks arubaosRange8.6.0.0–8.6.0.6

arubanetworks arubaosRange8.7.0.0–8.7.1.0

AND

arubanetworks 7005Match-

arubanetworks 7008Match-

arubanetworks 7010Match-

arubanetworks 7024Match-

arubanetworks 7030Match-

arubanetworks 7205Match-

arubanetworks 7210Match-

arubanetworks 7220Match-

arubanetworks 7240xmMatch-

arubanetworks 7280Match-

Node

arubanetworks sd-wanRange<2.1.0.2

arubanetworks sd-wanRange2.2.0.0–2.2.0.1

AND

arubanetworks 9004Match-

arubanetworks 9004-lteMatch-

arubanetworks 9012Match-

[
  {
    "product": "Aruba 9000 Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0.1"
      },
      {
        "status": "affected",
        "version": "2.2.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7000 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7200 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 05:15Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

EPSS0.003

CWE-77