CVEvulnerability
CVE-2015-1388
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP) mode allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected configurations
• arubanetworks arubaos (<= 6.2.3.9)
• arubanetworks arubaos 6.1.3.0
• arubanetworks arubaos 6.1.3.1
• arubanetworks arubaos 6.1.3.2
• arubanetworks arubaos 6.1.3.3
• arubanetworks arubaos 6.1.3.4
• arubanetworks arubaos 6.1.3.5
• arubanetworks arubaos 6.1.3.6
• arubanetworks arubaos 6.1.3.7
• arubanetworks arubaos 6.1.3.8
• arubanetworks arubaos 6.1.3.9
• arubanetworks arubaos 6.2.3.1
• arubanetworks arubaos 6.2.3.2
• arubanetworks arubaos 6.2.3.3
• arubanetworks arubaos 6.2.3.4
• arubanetworks arubaos 6.2.3.5
• arubanetworks arubaos 6.2.3.6
• arubanetworks arubaos 6.2.3.7
• arubanetworks arubaos 6.2.3.8
• arubanetworks arubaos 6.3.0.0
• arubanetworks arubaos 6.3.1
• arubanetworks arubaos 6.3.1.1
• arubanetworks arubaos 6.3.1.2
• arubanetworks arubaos 6.3.1.3
• arubanetworks arubaos 6.3.1.4
• arubanetworks arubaos 6.3.1.5
• arubanetworks arubaos 6.3.1.6
• arubanetworks arubaos 6.3.1.7
• arubanetworks arubaos 6.3.1.8
• arubanetworks arubaos 6.3.1.9
• arubanetworks arubaos 6.3.1.10
• arubanetworks arubaos 6.3.1.11
• arubanetworks arubaos 6.3.1.12
• arubanetworks arubaos 6.3.1.13
• arubanetworks arubaos 6.3.1.14
• arubanetworks arubaos 6.4.2.3
• arubanetworks arubaos 6.4.2.4
• arubanetworks arubaos 6.4.2.5
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt Vendor Advisory
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-004.txt Vendor Advisory