What is CVE-2019-5323?

CVE-2019-5323 is a high-severity vulnerability in Arubanetworks Airwave, classified under Command Injection. CVSS score: 7.2/10. Published 2020-02-27.

How severe is CVE-2019-5323?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Arubanetworks Airwave

CVE-2019-5323

There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized before being parsed by AirWave. If conditions are met, an attacker can obtain command execution on the host.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Arubanetworks Airwave
N/a Airwave Management Platform — versions 8.x prior to 8.2.10.1

Weakness classification (CWE)

CWE-77 — Command Injection

References

security-alert@hpe.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5323?: CVE-2019-5323 is a high-severity vulnerability in Arubanetworks Airwave, classified under Command Injection. CVSS score: 7.2/10. Published 2020-02-27.
How severe is CVE-2019-5323?: High severity. CVSS v3 base score is 7.2 out of 10.