What is CVE-2024-51772?

CVE-2024-51772 is a medium-severity vulnerability in Arubanetworks Clearpass Policy Manager, classified under Command Injection. CVSS score: 6.4/10. Published 2024-12-03.

How severe is CVE-2024-51772?

Medium severity. CVSS v3 base score is 6.4 out of 10.

RCE in Arubanetworks Clearpass Policy Manager

CVE-2024-51772

An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (36.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.

Affected products

Arubanetworks Clearpass_policy_manager
Hewlett Packard Enterprise (Hpe) Hpe Aruba Networking Clearpass Policy Manager — versions 6.12.0, 6.11.0

Weakness classification (CWE)

CWE-77 — Command Injection

References

security-alert@hpe.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-51772?: CVE-2024-51772 is a medium-severity vulnerability in Arubanetworks Clearpass Policy Manager, classified under Command Injection. CVSS score: 6.4/10. Published 2024-12-03.
How severe is CVE-2024-51772?: Medium severity. CVSS v3 base score is 6.4 out of 10.