CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
62.0%
The version of ArubaOS on the remote device is affected by a unspecified command injection vulnerability in the Remote Access Point (RAP) console. A local attacker can access the RAP console and inject commands that will be run on ArubaOS with root privileges.
#
# (C) Tenable Network Security, Inc.
#
include('compat.inc');
if (description)
{
script_id(82567);
script_version("1.6");
script_set_attribute(attribute:"plugin_modification_date", value:"2023/05/12");
script_cve_id("CVE-2015-1388");
script_bugtraq_id(73329);
script_xref(name:"IAVA", value:"2015-A-0065-S");
script_name(english:"ArubaOS Remote Access Point Command Injection");
script_set_attribute(attribute:"synopsis", value:
"The version of ArubaOS has a command injection vulnerability.");
script_set_attribute(attribute:"description", value:
"The version of ArubaOS on the remote device is affected by a
unspecified command injection vulnerability in the Remote Access Point
(RAP) console. A local attacker can access the RAP console and inject
commands that will be run on ArubaOS with root privileges.");
script_set_attribute(attribute:"see_also", value:"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt");
script_set_attribute(attribute:"solution", value:
"Upgrade to 6.3.1.15 / 6.4.2.4 or later.");
script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vuln_publication_date", value:"2015/03/18");
script_set_attribute(attribute:"patch_publication_date", value:"2015/03/18");
script_set_attribute(attribute:"plugin_publication_date", value:"2015/04/03");
script_set_attribute(attribute:"plugin_type", value:"remote");
script_set_attribute(attribute:"cpe", value:"cpe:/o:arubanetworks:arubaos");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2015-2023 Tenable Network Security, Inc.");
script_dependencies("arubaos_detect.nbin");
script_require_keys("Host/ArubaNetworks/model", "Host/ArubaNetworks/ArubaOS/version");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
model = get_kb_item_or_exit("Host/ArubaNetworks/model");
display_version = get_kb_item_or_exit("Host/ArubaNetworks/ArubaOS/version");
# Version may contain -FIPS at the end, unable to verify
version = ereg_replace(pattern:"-FIPS", replace:"", string:display_version);
fix = NULL;
if (
version =~ "^5\." ||
version =~ "^6\.1\." ||
version =~ "^6\.2\." ||
version =~ "^6\.3\."
)
fix = "6.3.1.15";
else if (version =~ "^6\.4\.")
fix = "6.4.2.4";
if (isnull(fix) || ver_compare(ver:version, fix:fix, strict:FALSE) >= 0)
audit(AUDIT_DEVICE_NOT_VULN, model, display_version);
if ("FIPS" >< display_version)
fix += "-FIPS";
if (report_verbosity > 0)
{
report =
'\n Model : ' + model +
'\n Installed version : ' + display_version +
'\n Fixed version : ' + fix +
'\n';
security_hole(port:0, extra:report);
}
else security_hole(port:0);
Vendor | Product | Version | CPE |
---|---|---|---|
arubanetworks | arubaos | cpe:/o:arubanetworks:arubaos |