Vulnerability in Arubanetworks Arubaos
CVE-2014-7299
Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session.
EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Arubanetworks Arubaos — versions 6.3.11, 6.4.2.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)