CVE-2024-25612: Command Injection
Published Mar 5, 2024
·Updated
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
Affected Software
5 affected components
Aruba ArubaOS
Arubanetworks Arubaos>=8.10.0.0<8.10.0.10
Arubanetworks Arubaos>=8.11.0.0<8.11.2.1
Arubanetworks Arubaos>=10.4.0.0<10.4.1.0
Arubanetworks Arubaos>=10.5.0.0<10.5.1.0
Event History
Mar 5, 2024
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
DescriptionSeverity
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-25612?
The severity of CVE-2024-25612 is classified as high due to the potential for arbitrary command execution.
2
How do I fix CVE-2024-25612?
To fix CVE-2024-25612, update to the latest version of ArubaOS as recommended by Aruba.
3
What systems are affected by CVE-2024-25612?
CVE-2024-25612 affects the command line interface of ArubaOS.
4
What are the potential impacts of CVE-2024-25612?
Successful exploitation of CVE-2024-25612 allows attackers to execute arbitrary commands with privileged access.
5
Is authentication required to exploit CVE-2024-25612?
Yes, authentication is required to exploit CVE-2024-25612 as it exists within the command line interface.