CVE-2021-34613: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

PT-2021-20580

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20583

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20578

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20581

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. This allows for the execution of commands on the affected system. Aruba has released updates to address this...

PT-2021-20582

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

PT-2021-20577

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions prior to 6.10.0 Description: A remote arbitrary command execution issue was discovered. Aruba has released updates to address this security issue. Recommendations: For versions prior to 6.10.0, update t...

Aruba ClearPass Policy Manager command injection vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to arbitrarily run commands on the underlying host...

CVE-2021-34615: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-34616: Improper Neutralization of Special Elements used in an OS Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability...

CVE-2021-32529

Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32523

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32534: Improper Neutralization of Special Elements used in an OS Command

QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0...

CVE-2021-32524: Improper Neutralization of Special Elements used in an OS Command

Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32523: Improper Authorization

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document...

CVE-2021-32513: Improper Neutralization of Special Elements used in an OS Command

QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32512: Improper Neutralization of Special Elements used in an OS Command

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-20776: Improper Authentication

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet...

PT-2021-14231

Name of the Vulnerable Software and Affected Versions: SCT-40CM01SR affected versions not specified AT-40CM01SR affected versions not specified Description: The issue is related to improper authentication, allowing an attacker to bypass access restrictions. This can lead to the execution of...

PT-2021-19757

Name of the Vulnerable Software and Affected Versions: QSAN XEVO versions prior to 2.1.0 Description: The issue allows remote attackers to execute arbitrary commands without permissions due to an OS command injection vulnerability in the Init function. Recommendations: For versions prior to 2.1.0...