CVE-2024-54007: Improper Neutralization of Special Elements used in a Command

🗓️ 07 Jan 2025 00:00:00Reported by Rapid7Type

Multiple command injection vulnerabilities exist in the web interface of the 501 Wireless Client Bridge which could lead to authenticated remote command execution. Successful exploitation of these vulnerabilities result in the ability of an attack...

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability in the web interface of the microprogramming software for wireless client bridges from HPE Aruba Networking 501 allows a attacker to execute arbitrary code in the device’s basic operating system.	13 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-54007	7 Jan 202517:40	–	circl
CNNVD	Hewlett Packard Enterprise 501 Wireless Client Bridge 命令注入漏洞	7 Jan 202500:00	–	cnnvd
CVE	CVE-2024-54007	7 Jan 202517:17	–	cve
Cvelist	CVE-2024-54007 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge	7 Jan 202517:17	–	cvelist
EUVD	EUVD-2024-52238	3 Oct 202520:07	–	euvd
HPE Security Bulletins	HPESBNW04763 rev.1 - HPE Aruba Networking 501 Wireless Client Bridge Authenticated Remote Command Injection Vulnerabilities	7 Jan 202500:00	–	hpe
NVD	CVE-2024-54007	7 Jan 202518:15	–	nvd
RedhatCVE	CVE-2024-54007	5 Feb 202504:00	–	redhatcve
Vulnrichment	CVE-2024-54007 Authenticated Remote Command Injection Vulnerability in the Web Interface of a 501 Wireless Client Bridge	7 Jan 202517:17	–	vulnrichment

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-54007

15 Apr 2026 00:00Current

CVSS 3.17.2

EPSS0.0155

SSVC