First published: Tue Mar 24 2015(Updated: )
The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Arubanetworks Arubaos | <=6.2.3.9 | |
Arubanetworks Arubaos | =6.1.3.0 | |
Arubanetworks Arubaos | =6.1.3.1 | |
Arubanetworks Arubaos | =6.1.3.2 | |
Arubanetworks Arubaos | =6.1.3.3 | |
Arubanetworks Arubaos | =6.1.3.4 | |
Arubanetworks Arubaos | =6.1.3.5 | |
Arubanetworks Arubaos | =6.1.3.6 | |
Arubanetworks Arubaos | =6.1.3.7 | |
Arubanetworks Arubaos | =6.1.3.8 | |
Arubanetworks Arubaos | =6.1.3.9 | |
Arubanetworks Arubaos | =6.2.3.1 | |
Arubanetworks Arubaos | =6.2.3.2 | |
Arubanetworks Arubaos | =6.2.3.3 | |
Arubanetworks Arubaos | =6.2.3.4 | |
Arubanetworks Arubaos | =6.2.3.5 | |
Arubanetworks Arubaos | =6.2.3.6 | |
Arubanetworks Arubaos | =6.2.3.7 | |
Arubanetworks Arubaos | =6.2.3.8 | |
Arubanetworks Arubaos | =6.3.0.0 | |
Arubanetworks Arubaos | =6.3.1 | |
Arubanetworks Arubaos | =6.3.1.1 | |
Arubanetworks Arubaos | =6.3.1.2 | |
Arubanetworks Arubaos | =6.3.1.3 | |
Arubanetworks Arubaos | =6.3.1.4 | |
Arubanetworks Arubaos | =6.3.1.5 | |
Arubanetworks Arubaos | =6.3.1.6 | |
Arubanetworks Arubaos | =6.3.1.7 | |
Arubanetworks Arubaos | =6.3.1.8 | |
Arubanetworks Arubaos | =6.3.1.9 | |
Arubanetworks Arubaos | =6.3.1.10 | |
Arubanetworks Arubaos | =6.3.1.11 | |
Arubanetworks Arubaos | =6.3.1.12 | |
Arubanetworks Arubaos | =6.3.1.13 | |
Arubanetworks Arubaos | =6.3.1.14 | |
Arubanetworks Arubaos | =6.4.2.3 | |
Arubanetworks Arubaos | =6.4.2.4 | |
Arubanetworks Arubaos | =6.4.2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-1388 has a high severity rating due to the potential for remote code execution.
To fix CVE-2015-1388, upgrade ArubaOS to version 6.3.1.15 or later, or 6.4.2.4 or later.
CVE-2015-1388 affects ArubaOS versions 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4.
By exploiting CVE-2015-1388, attackers can execute arbitrary commands on affected Aruba access points.
As of now, the recommended action is to update to a safe version, as there are no known effective workarounds for CVE-2015-1388.