CVEvulnerability
CVE-2014-8368
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
Affected configurations
• arubanetworks airwave (>= 7.7.0 < 7.7.14)
• arubanetworks airwave (>= 8.0.0 < 8.0.5)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/62578 Third Party Advisory
- http://www.arubanetworks.com/support/alerts/aid-11192014.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98871 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/62578 Third Party Advisory
- http://www.arubanetworks.com/support/alerts/aid-11192014.txt Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98871 Third Party Advisory, VDB Entry