VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 13, 2019· Updated Jun 17, 2026

CVE-2019-5315

CVE-2019-5315

Description

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

Affected products

3
  • Arubanetworks/Arubaos2 versions
    cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*range: >=8.0.0.0,<8.3.0.0
    • (no CPE)range: 8.x
  • Aruba/ArubaOSdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.