11 matches found
EUVD-2021-12078
Malware in sbrugna...
EUVD-2014-8205
Malware in sbrugna...
EUVD-2015-2308
Malware in sbrugna...
EUVD-2015-1528
Malware in sbrugna...
CVE-2021-26971
A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A...
CVE-2024-54008
CVE-2024-54008 describes an authenticated Remote Code Execution (RCE) in the AirWave CLI, allowing a remote authenticated threat actor to execute arbitrary commands as a privileged user on the underlying host. Affected software is HPE Aruba Networking AirWave Management Platform. The available so...
Aruba Networks Airwave Cross-Site Request Forgery Vulnerability
Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...
Aruba Networks AirWave Management Platform 操作系统命令注入漏洞
Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...
CVE-2021-26963
A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could...
Aruba Networks Aruba Airwave Remote Code Execution Vulnerability
Aruba Networks Aruba Airwave is Aruba Networks' software for visualizing, tracking, and managing wired wireless networks. A remote code execution vulnerability exists in Aruba Airwave Software versions prior to 1.3.2, which can be exploited by an unauthenticated attacker to conduct remote arbitra...
Command injection
There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized before being parsed by AirWave. If conditions are met, an attacker can obtain command execution on the host...