PT-2025-15460 · Aruba · Aos-8 Instant+1
Published
2025-04-08
·
Updated
2025-04-08
·
CVE-2025-27078
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
AOS-8 Instant (affected versions not specified)
AOS-10 AP versions up to 8.10.0.15
AOS-10 AP versions up to 8.12.0.3
AOS-10 AP versions up to 10.4.1.5
AOS-10 AP versions up to 10.7.0.1
Description:
A vulnerability in a system binary could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise.
Recommendations:
For AOS-8 Instant, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For AOS-10 AP versions up to 8.10.0.15, update to a version later than 8.10.0.15.
For AOS-10 AP versions up to 8.12.0.3, update to a version later than 8.12.0.3.
For AOS-10 AP versions up to 10.4.1.5, update to a version later than 10.4.1.5.
For AOS-10 AP versions up to 10.7.0.1, update to a version later than 10.7.0.1.
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Aos-10 Ap
Aos-8 Instant