VDB

GCVE-110-NCSC-2024-431

GCVE-110-NCSC-2024-431
Advisory PublishedCVSS 9.8/10
Vulnetix · Advisory published November 7, 2024
Aruba Networks heeft kwetsbaarheden verholpen in ArubaOS.

Weaknesses (CWE)

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Risk Scores

CVSS 3.1
9.8/10
Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionsPlatforms
hewlett_packard_enterprise__hpe_hpe_aruba_networking_access_points__instant_aos-8__and_aos-10
arubanetworksinstant
arubaarubaos
arubanetworksarubaos

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›