CVE-2014-8368
published 2014-11-25CVE-2014-8368: The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary…
PriorityP351critical9CVSS 2.0
AVNACLAuSCCICAC
EPSS
2.81%
84.7th percentile
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arubanetworks | airwave | >= 7.7.0 < 7.7.14 | 7.7.14 |
| arubanetworks | airwave | >= 8.0.0 < 8.0.5 | 8.0.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/62578http://www.arubanetworks.com/support/alerts/aid-11192014.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/98871http://secunia.com/advisories/62578http://www.arubanetworks.com/support/alerts/aid-11192014.txthttps://exchange.xforce.ibmcloud.com/vulnerabilities/98871
2014-11-25
Published