CVE-2021-34611

CVE-2021-34611 describes a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager prior to version 6.10.0, 6.9.6, and 6.8.9. The issue allows an attacker to execute commands on the underlying system remotely (no user interaction required per CVSS data), making it a hig...

PT-2021-20580

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20583

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20578

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20581

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. This allows for the execution of commands on the affected system. Aruba has released updates to address this...

PT-2021-20582

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20577

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

Aruba ClearPass Policy Manager command injection vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to arbitrarily run commands on the underlying host...

CVE-2021-34614: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34613: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34616: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34615: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-32529

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32523

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-20776

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet...

Authentication flaw

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet...

CVE-2021-20776

CVE-2021-20776 applies to A-Stage SCT-40CM01SR and AT-40CM01SR. The issue is improper authentication that allows an attacker to bypass login restrictions and execute arbitrary commands via telnet. Affected devices expose command execution after authentication bypass, with the impact described as ...

CVE-2021-20776

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet...

CVE-2021-32534: Improper Neutralization of Special Elements used in an OS Command

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

CVE-2021-32523: Improper Authorization

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...