Back to search
CVE-2019-5315
Published: Sep 13, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.
| Vendor | Product | Versions |
|---|---|---|
n/a | Aruba Mobility Controllers | affected Aruba Mobility Controller firmware (ArubaOS) prior to 8.2.2.6, 8.3.0.x prior to 8.3.0.7 and 8.4.0.x prior to 8.4.0.3 |
References
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now