An authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10 command line interface.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• arubanetworks arubaos10.3.0.0 and later · before 10.3.1.1
• arubanetworks instant6.4.0.0 and later · before 6.4.4.8-4.2.4.21
• arubanetworks instant6.5.0.0 and later · before 6.5.4.24
• arubanetworks instant8.6.0.0 and later · before 8.6.0.19
• arubanetworks instant8.7.0.0 and later · before 8.7.1.10
• arubanetworks instant8.10.0.0 and later · before 8.10.0.2
• siemens scalance w1750d firmwareall versions

Versions reported by the vendor

Affected version ranges reported by the assigning authority (hpe). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Acc

  • Aruba InstantOS 6.4.x: 6.4.4.8-4.2.4.20 and below, Aruba InstantOS 6.5.x: 6.5.4.23 and below, Aruba InstantOS 8.6.x: 8.6.0.18 and below, Aruba InstantOS 8.7.x: 8.7.1.9 and below, Aruba InstantOS 8.10.x: 8.10.0.1 and below, ArubaOS 10.3.x: 10.3.1.0 and belowaffected

Other highest-scoring records for the same primary product.

• CVE-2020-24633There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted pa
  41Plan
• CVE-2018-7081A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS.
  41Plan
• CVE-2023-45616There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution b
  40Plan

Published before and after this one in the same product

• ← EarlierCVE-2022-37891Oct 7, 2022 · Unauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10 web management interface.
  39Monitor
• ← EarlierCVE-2022-37892Oct 7, 2022 · A vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an unauthenticated remote attacker to conduct a s
  21Monitor
• Later →CVE-2022-37894Oct 7, 2022 · An unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID strings by Aruba InstantOS and ArubaOS 10.
  26Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User input is inserted as text into a shell command. The shell may interpret special characters in the input as part of the command.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1const host = req.body.host;2exec("ping -c 1 " + host, onResult);

1const host = req.body.host;2if (!/^[a-z0-9.-]{1,253}$/i.test(host)) return res.sendStatus(400);3execFile("ping", ["-c", "1", host], onResult);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.