CVE-2014-8368 The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
HighCVSS 9.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks airwave | >= 7.7.0, < 7.7.14 | 7.7.14 |
| arubanetworks airwave | >= 8.0.0, < 8.0.5 | 8.0.5 |
References
- 62578 third-party-advisory
- www.arubanetworks.com vendor-advisory
- airwave-cve20148368-priv-esc(98871) third-party-advisory vdb-entry