ArubaOS Command Injection Vulnerabilities: Privileged User Execution

CVE-2024-25613

What is CVE-2024-25613?

ArubaOS, the operating system developed by Aruba Networks, is impacted by authenticated command injection vulnerabilities within its command line interface. These flaws could allow an attacker with valid credentials to inject malicious commands, ultimately enabling the execution of arbitrary code at the privilege level of the underlying operating system. This poses significant security risks, as it may lead to unauthorized access and manipulation of sensitive system resources. Organizations using affected versions of ArubaOS are advised to review their security posture and apply necessary mitigations to protect against potential exploitation of these vulnerabilities.

References