Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-25614

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) ArubaOS Wi-Fi Controllers and Campus/Remote Access Points

Default version status: affected

  • ArubaOS 10.5.x.x: 10.5.0.1 and belowaffected
  • ArubaOS 10.4.x.x: 10.4.0.3 and belowaffected
  • ArubaOS 8.11.x.x: 8.11.2.0 and belowaffected
  • ArubaOS 8.10.x.x: 8.10.0.9 and belowaffected

References