CVE-2014-2592: Malicious File Upload
Published Mar 9, 2018
·Updated
Unrestricted file upload vulnerability in Aruba Web Management portal allows remote attackers to execute arbitrary code by uploading a file with an executable extension.
Affected Software
1 affected component
Arubanetworks Web Management Portal=6.3.0.60730
Event History
Mar 9, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-2592?
CVE-2014-2592 has a high severity rating due to the potential for remote code execution by attackers.
2
How do I fix CVE-2014-2592?
To mitigate CVE-2014-2592, ensure that file uploads are limited to specific types and extensions and implement strict validation.
3
What software is affected by CVE-2014-2592?
CVE-2014-2592 affects the Aruba Web Management Portal version 6.3.0.60730.
4
Can CVE-2014-2592 be exploited remotely?
Yes, CVE-2014-2592 can be exploited remotely, allowing attackers to upload malicious files.
5
What are the consequences of exploiting CVE-2014-2592?
Exploiting CVE-2014-2592 can lead to arbitrary code execution on the server, compromising the entire system.