CVE-2020-24634

🗓️ 11 Dec 2020 01:22:50Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 107 Views

Remotely inject arbitrary commands via PAPI UDP port (8211) in Aruba 9000 Gateway, 7000 Series Mobility Controllers, 7200 Series Mobility Controllers (v2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below

Reporter	Title	Published	Views	Family All 10
CNNVD	Aruba Networks ArubaOS Command Injection Vulnerability	9 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-24634	11 Dec 202001:22	–	cvelist
EUVD	EUVD-2020-17350	7 Oct 202500:30	–	euvd
HPE Security Bulletins	HPESBNW04072 rev.2 - HPE ArubaOS, Multiple Remote Vulnerabilities	8 Dec 202000:00	–	hpe
NCSC	Vulnerabilities fixed in ArubaOS	11 Dec 202000:00	–	ncsc
NVD	CVE-2020-24634	11 Dec 202002:15	–	nvd
OSV	CVE-2020-24634	11 Dec 202002:15	–	osv
Prion	Code injection	11 Dec 202002:15	–	prion
Positive Technologies	PT-2020-15785	11 Dec 202000:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2020-24634: Improper Neutralization of Special Elements used in a Command	11 Dec 202000:00	–	rapid7

NVD

Vulners

Node

AND

arubanetworks arubaosRange<8.2.2.10

arubanetworks arubaosRange8.3.0.0–8.3.0.14

arubanetworks arubaosRange8.4.0.0–8.5.0.11

arubanetworks arubaosRange8.6.0.0–8.6.0.6

arubanetworks arubaosRange8.7.0.0–8.7.1.0

arubanetworks 7005Match-

arubanetworks 7008Match-

arubanetworks 7010Match-

arubanetworks 7024Match-

arubanetworks 7030Match-

arubanetworks 7205Match-

arubanetworks 7210Match-

arubanetworks 7220Match-

arubanetworks 7240xmMatch-

arubanetworks 7280Match-

Node

AND

arubanetworks sd-wanRange<2.1.0.2

arubanetworks sd-wanRange2.2.0.0–2.2.0.1

arubanetworks 9004Match-

arubanetworks 9004-lteMatch-

arubanetworks 9012Match-

[
  {
    "product": "Aruba 9000 Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0.1"
      },
      {
        "status": "affected",
        "version": "2.2.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7000 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7200 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

17 Jun 2026 03:05Current

9.4Critical risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

EPSS0.02076

CWE-77