Command injection

2021-09-0713:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability.

CPENameOperatorVersion
arubaosge8.6.0.0
arubaoslt8.6.0.6
arubaosge8.5.0.0
arubaoslt8.5.0.12
arubaosge8.3.0.0
arubaoslt8.3.0.16
arubaosge8.7.0.0
arubaoslt8.7.1.4
sd-wange2.2.0.0
sd-wanlt2.2.0.6

Name	Operator	Version
arubaos	ge	8.6.0.0
arubaos	lt	8.6.0.6
arubaos	ge	8.5.0.0
arubaos	lt	8.5.0.12
arubaos	ge	8.3.0.0
arubaos	lt	8.3.0.16
arubaos	ge	8.7.0.0
arubaos	lt	8.7.1.4
sd-wan	ge	2.2.0.0
sd-wan	lt	2.2.0.6