CVE-2024-42503: Authenticated Remote Command Execution (RCE) Vulnerability in the Lua Package Within the AOS Command Line Interface (CLI)
Authenticated command execution vulnerability exist in the ArubaOS command line interface (CLI). Successful exploitation of this vulnerabilities result in the ability to run arbitrary commands as a priviledge user on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42503?
CVE-2024-42503 is considered a critical severity vulnerability due to the potential for authenticated command execution as a privileged user.
How do I fix CVE-2024-42503?
To fix CVE-2024-42503, you should update to the latest version of ArubaOS that addresses this vulnerability.
What systems are affected by CVE-2024-42503?
CVE-2024-42503 affects variations of the ArubaOS command line interface.
Can CVE-2024-42503 be exploited remotely?
CVE-2024-42503 requires authenticated access, so exploitation typically occurs from an authenticated user terminal.
What are the potential impacts of exploiting CVE-2024-42503?
Exploiting CVE-2024-42503 may allow an attacker to execute arbitrary commands on the underlying operating system with elevated privileges.