What is CVE-2018-7084?

CVE-2018-7084 is a command injection vulnerability present in the Aruba Instant web interface, allowing an unauthenticated user to execute arbitrary system commands.

How does CVE-2018-7084 affect Aruba Instant?

CVE-2018-7084 affects Aruba Instant versions ranging from 4.0 to 4.2.4.12, 6.5.0 to 6.5.4.11, 8.3.0 to 8.3.0.6, and 8.4.0 to 8.4.0.1.

What can an attacker potentially do with CVE-2018-7084?

An attacker exploiting CVE-2018-7084 can perform actions like copying files, reading configuration, writing files, and deleting files on the underlying operating system.

How severe is CVE-2018-7084?

CVE-2018-7084 has a severity rating of 9.8 out of 10, making it critical.

How can I mitigate CVE-2018-7084?

To mitigate CVE-2018-7084, users should update their Aruba Instant software to a version that is not affected.

Vulnerability/
CVE-2018-7084

critical

CWE

78 77

10/5/2019

5/8/2024

CVE-2018-7084: OS Command Injection

First published: Fri May 10 2019(Updated: )

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete files, or reboot the device. Workaround: Block access to the Aruba Instant web interface from all untrusted users. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.1

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
Arubanetworks Aruba Instant	>=4.0<4.2.4.12
Arubanetworks Aruba Instant	>=6.5.0<6.5.4.11
Arubanetworks Aruba Instant	>=8.3.0<8.3.0.6
Arubanetworks Aruba Instant	>=8.4.0<8.4.0.1
Siemens Scalance W1750d Firmware	<8.4.0.1
Siemens SCALANCE W1750D

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2018-7084?
CVE-2018-7084 is a command injection vulnerability present in the Aruba Instant web interface, allowing an unauthenticated user to execute arbitrary system commands.
How does CVE-2018-7084 affect Aruba Instant?
CVE-2018-7084 affects Aruba Instant versions ranging from 4.0 to 4.2.4.12, 6.5.0 to 6.5.4.11, 8.3.0 to 8.3.0.6, and 8.4.0 to 8.4.0.1.
What can an attacker potentially do with CVE-2018-7084?
An attacker exploiting CVE-2018-7084 can perform actions like copying files, reading configuration, writing files, and deleting files on the underlying operating system.
How severe is CVE-2018-7084?
CVE-2018-7084 has a severity rating of 9.8 out of 10, making it critical.
How can I mitigate CVE-2018-7084?
To mitigate CVE-2018-7084, users should update their Aruba Instant software to a version that is not affected.

agent/weakness
agent/type
agent/last-modified-date
agent/first-publish-date
collector/nvd-index
agent/software-canonical-lookup-request
agent/severity
agent/references
agent/author
agent/softwarecombine
agent/tags
agent/description
agent/event
collector/mitre-cve
source/MITRE
vendor/arubanetworks
canonical/arubanetworks aruba instant
version/arubanetworks aruba instant/4.0
version/arubanetworks aruba instant/6.5.0
version/arubanetworks aruba instant/8.3.0
version/arubanetworks aruba instant/8.4.0
vendor/siemens
canonical/siemens scalance w1750d firmware
canonical/siemens scalance w1750d

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.