CVE-2022-37911

Due to improper restrictions on XML entities multiple vulnerabilities exist in the command line interface of ArubaOS. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of...

CVE-2022-37911

CVE-2022-37911 involves ArubaOS where the command line interface is affected by an XML External Entity (XXE)–related flaw due to improper restrictions on XML entities. The issue can allow an authenticated attacker to read local files or exhaust resources, leading to a denial of service. Affected ...

CVE-2022-37902

Summary: CVE-2022-37902 is an authenticated command-injection vulnerability in ArubaOS CLI. The vulnerability enables execution of arbitrary commands with elevated privileges on the underlying OS, exploitable by an authenticated attacker over the network. Documents consistently name ArubaOS and i...

PT-2022-24136 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation allows attackers to execute arbitrary commands as a...

PT-2022-24145 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: A buffer overflow issue exists in the command line interface, which can be exploited to cause a denial of service on the affected system. Recommendations: At the moment, there is no...

PT-2022-24134 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue concerns authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation allows attackers to execute arbitrary commands as a...

PT-2022-24140 · Aruba · Arubaos

Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to an authenticated path traversal vulnerability in the command line interface. This vulnerability can be exploited to delete arbitrary files on the underlying operatin...

CVE-2022-38372

A hidden functionality vulnerability CWE-1242 in FortiTester CLI 2.3.0 through 3.9.1, 4.0.0 through 4.2.0, 7.0.0 through 7.1.0 may allow a local, privileged user to obtain a root shell on the device via an undocumented command...

The vulnerability of the command-line interface (CLI) of FortiOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of FortiOS operating systems is related to the use of rigidly encrypted credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Error: "File too large" when upload customized login schema xml file to ADC

1. When add login schema via ADC cli, below erro will prompt: 2. When add login schema via, below GUI error will show:...

Aruba Networks ArubaOS 路径遍历漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from authenticated path traversal in the command line...

Aruba Networks ArubaOS 安全漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an authenticated buffer overflow in the command...

The vulnerability of the command-line interface of the Brocade Fabric OS allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of the Brocade Fabric OS is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the command-line interface of the Brocade Fabric OS allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of the Brocade Fabric OS relates to the disclosure of information. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information using the commands “seccryptocfg” and “configupload”...

The vulnerability of the command-line interface of the Brocade Fabric OS allows a hacker to gain increased privileges.

The vulnerability of the command-line interface of the Brocade Fabric OS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges using commands such as “supportlink”, “firmwaredownload”, “portcfgupload”, and “fosexec”...

CVE-2021-44171

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged command...

CVE-2022-20850

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit...

CVE-2022-20775

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted...

CVE-2022-20818

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a...

CVE-2022-20775 Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted...