CVE-2014-8368 — Airwave vulnerability

CWE-2643 documents3 sources
Severity
9.0CRITICALNVD
EPSS
1.4%
top 19.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Arubanetworks Airwave
Timeline
PublishedNov 25
Latest updateMay 14

Description

The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

▶NVDarubanetworks/airwave7.7.0 — 7.7.14+1

🔴Vulnerability Details

2
GHSA
GHSA-jgjq-6pv4-6m7c: The web interface in Aruba Networks AirWave before 7↗2022-05-14
▶
CVEList
CVE-2014-8368: The web interface in Aruba Networks AirWave before 7↗2014-11-25
▶
CVE-2014-8368 — Arubanetworks Airwave vulnerability | cvebase