CVE-2025-37163: Airwave: komut enjeksiyonu

Açıklama (NVD)

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.

Özet bilgiler

Ürün

Arubanetworks Airwave

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,96 (yüzdelik 62)

CWE

CWE-77

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.hpe.com
• CWE-77