CVE-2018-7082

published 2019-05-10

CVE-2018-7082: A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying…

high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0

Affected

5 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	aruba_instant	>= 4.0 < 4.2.4.12	4.2.4.12
arubanetworks	aruba_instant	>= 6.5.0 < 6.5.4.11	6.5.4.11
arubanetworks	aruba_instant	>= 8.3.0.0 < 8.3.0.6	8.3.0.6
arubanetworks	aruba_instant	>= 8.4.0 < 8.4.0.1	8.4.0.1
siemens	scalance_w1750d_firmware	< 8.4.0.1	8.4.0.1

CWE-78