Command injection

2019-05-1017:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0

CPENameOperatorVersion
aruba_instantge6.5.0
aruba_instantlt6.5.4.11
aruba_instantge8.4.0
aruba_instantlt8.4.0.1
aruba_instantge4.0
aruba_instantlt4.2.4.12
aruba_instantge8.3.0.0
aruba_instantlt8.3.0.6
scalance_w1750d_firmwarelt8.4.0.1

Name	Operator	Version
aruba_instant	ge	6.5.0
aruba_instant	lt	6.5.4.11
aruba_instant	ge	8.4.0
aruba_instant	lt	8.4.0.1
aruba_instant	ge	4.0
aruba_instant	lt	4.2.4.12
aruba_instant	ge	8.3.0.0
aruba_instant	lt	8.3.0.6
scalance_w1750d_firmware	lt	8.4.0.1