ArubaOS 8.10.x < 8.10.0.14, 8.12.x < 8.12.0.2, 10.6.x < 10.6.0.3 Multiple Vulnerabilities (HPESBNW04709)

The version of ArubaOS installed on the remote host is affected by multiple vulnerabilities: - An authenticated Path Traversal vulnerabilities exists in the ArubaOS. Successful exploitation of this vulnerability allows an attacker to install unsigned packages on the underlying operating system,...

CVE-2024-42503 Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)

Authenticated command execution vulnerability exist in the ArubaOS command line interface CLI. Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system...

CVE-2024-42503

CVE-2024-42503 is an authenticated command execution vulnerability in ArubaOS CLI. Exploitation enables running arbitrary commands as a privileged OS user. The connected Nessus entry HPESBNW04709 notes affected ArubaOS versions: ArubaOS 8.10.x before 8.10.0.14, 8.12.x before 8.12.0.2, and 10.6.x ...