NetSight
IP …
high7.2

CVE-2018-7082

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying…

Impact

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. Workaround: None. Resolution: Fixed in Aruba Instant 4.2.4.12, 6.5.4.11, 8.3.0.6, and 8.4.0.0

Affected products

VendorProductAffected versions
ArubanetworksAruba Instant
from 4.0 before 4.2.4.12
from 6.5.0 before 6.5.4.11
from 8.3.0.0 before 8.3.0.6
from 8.4.0 before 8.4.0.1
SiemensScalance W1750d Firmware
before 8.4.0.1

Weakness classification

CWE-78

References