RCE in Arubanetworks Arubaos
CVE-2015-1388
The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.
Affected products
- Arubanetworks Arubaos — versions 6.1.3.0, 6.1.3.1, 6.1.3.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)